How to find the thumbprint/serial number of a certificate?

May 25, 2018 in SSL Technical FAQs

How to find the thumbprint/serial number of a certificate?

Please be aware this article assumes you have access to: the CRT file, the certificate via IIS, Internet Explorer (IE), Microsoft Management Console (MMC), Firefox or OpenSSL.

Option #1: Windows (MMC, IE, IIS)

    1. Open Certificate to the General Tab


IIS 5.x & 6.x:Right-Click

website ->

Left-Click

Properties -> Directory Security -> View Certificate



MMC (Microsoft Management Console):

File -> Add/Remove Snap-in -> Certificates -> Add -> Close -> Expand (Click '+' Sign) Certificates - Local Computer -> Personal -> Certificates ->

Double-Click

on a certificate to

open

or

right-click

on the certificate and left click on

Open

.



Internet Explorer:

Tools -> Internet Options -> Content -> Certificates



    1. Click on Details
    1. Be sure that the Show drop down displays <All> .
    1. Click the word Serial number or Thumbprint. Depending on what you're looking for.
    1. Your selection will display in the big text area below the box where you made your choice.
      Note: Right-Clicking to access the Cut, Copy, Paste menu does not work in this area. Only CTRL+C to copy does.



Option #2: Firefox

Firefox 3 (Digital ID/Code Signing):

    1. Windows: Tools -> Options
      Linux: Edit -> Options
      Mac: Firefox -> Options
    1. Navigate to Advanced -> Encryption and then click on View Certificates.


Enter Mozilla Certificate Manager

    1. Click the tab Your Certificates or the tab of your choice.
    1. Then click the line containing your selection, which the certificate should be highlighted thereafter.
    1. Click View to open the Mozilla Certificate Viewer.


Enter Mozilla Certificate Viewer
Firefox 3 (SSL Certificate):

    1. Click the favorite icon (to the left of the address bar). It should have a blue or green background.
    1. Now click View Certificate button.


Enter Mozilla Certificate Viewer

If the favorite icon/address bar is not present:

    1. Windows: Tools -> Page Info -> Security -> View Certificate


Enter Mozilla Certificate Viewer

Mozilla Certificate Viewer

    1. Inside here you will find the data that you need.


Note:

The thumbprint of a certificate in Mozilla is considered the SHA1 Fingerprint.




Option #3: OpenSSL

    1. Serial Number:
      -> openssl x509 -in CERTIFICATE_FILE -serial -noout
    1. Thumbprint:
      -> openssl x509 -in CERTIFICATE_FILE -fingerprint -noout



Note: Please replace CERTIFICATE_FILE with the actual file name of the certificate.

More information on OpenSSL's x509 command can be found here.