Sectigo Qualified Website Authentication CA R39

Sectigo intermediate certificate used for the issuance of QWAC server certificats in RSA format as of 2026/03/02. Chained with Sectigo Public Server Authentication Root R46.

It can be imported via this link:
https://sectigo.tbs-certificats.com/SectigoQualifiedWebsiteAuthenticationCAR39.crt

Or use the text version here under.

Its CRL is available here: http://crl.sectigo.com/SectigoQualifiedWebsiteAuthenticationCAR39.crl

-----BEGIN CERTIFICATE-----
MIIGSDCCBDCgAwIBAgIRAI+hCmm2qH2xM2wywhU7wxkwDQYJKoZIhvcNAQEMBQAw
XzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UE
AxMtU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2
MB4XDTI0MDkxODAwMDAwMFoXDTM5MDkxNzIzNTk1OVowZTELMAkGA1UEBhMCRVMx
HDAaBgNVBAoTE1NlY3RpZ28gKEV1cm9wZSkgU0wxODA2BgNVBAMTL1NlY3RpZ28g
UXVhbGlmaWVkIFdlYnNpdGUgQXV0aGVudGljYXRpb24gQ0EgUjM5MIIBojANBgkq
hkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAyO7Weu0IDPcA34EC0qUuJcH6LBnH0WxU
NFbMBPSMbdqh6GLjoaWub50J+PPUgohV2w5sj4bh5vI7o1Kem6En3yq/Rs/vJc9I
4/TdAIKU0mjsQMWL0QrAaE73XJw73m9PtY0WZh4+NwY7oKiQrHELj6CD4r47CgVy
5GqFq2VJexfXNNNvJJMeSoSd3APwkusPk9zhxRfY6CPWP5fRHWQvkvUT/4/bG23a
KawKJgWP39IXf11uFK4GSjZQULJKaEDyEovm5ipgchRQ3a22MHnf9Zrmz993W1oj
M58HRE8xoIkUXjRlPIQNWexJa4En4BloGskZaq9+l5AnP6cQbihIs4Ip160tOyt7
zimYP8F+a/BDLSwfAO0Wd+eGyA3kccgWS3d3e6/cISNYkC47d7L7biScEvQC1oA0
oeJmdRvzye1GVFW+HhUs/biZLXJkf0PtmrOSpPagUyCPl0mVeK4fY8zwcUfK/m4e
bqvQco/twfoeeSDbYD44tRVdRltJ7wYrAgMBAAGjggF3MIIBczAfBgNVHSMEGDAW
gBRWc1hklfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQUKmTaW2FLhL1sLMElTqQV
4YxlEGMwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEGA1UdIAQKMAgwBgYEVR0gADBUBgNV
HR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29QdWJs
aWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYuY3JsMIGEBggrBgEFBQcBAQR4
MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1
YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdFI0Ni5wN2MwIwYIKwYBBQUHMAGG
F2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBDAUAA4ICAQBosFgw
CxKNhVpSg7OOSxbQ7mk068XKumPiQtQt/CIK4BNU4z1NbNJRgjJCq1x58gIyayhe
mmnOnINTwuGlaSE4NxPWCcGivn3vJIQLH/26ZapvAg9TPj5aLV2iF+owMKIFNuhn
bMo9Wot0Q8i8+Al4pvrr7iRgl8Q+EMheKWMIalVss27hJTyPI8GIKjnHNqVsJVvr
w2ExyvVRMKcLC1+aiwQ/4wOehhdf/p4e3dE6HvDKRIkesGype81r5/tGifAgYrVf
CBPzajEARUeWqrxhZvG/lm1LyZLKUoemIQGgaR/GkuOdcyLUnfZ9CuBmaTD2sxBA
b7RUB7y4DK6R3+fvWyHLjGgDSpmVXOpTOjr6ehQiAnyEtyI8wl30aGeV2o2nwcuM
JWSO24l5ciiSB5SseejooCFQ3T6dunB1JPqlyygd2fLHo/IB0aJxyMrT2pg8tGC3
CJuDof6AV9yoSq/xWtVFtCujZaVMjExGXjFl4sWSccxp55mI6M2COu09RjqEgTiS
8HdVMmPtol2LW7z47hJUc4vsmUtDDs/oMi27j0zHb85ZlXJtYOmq8rnhrfTcpVf8
EEI/cW+zdRJJR5A+PTq/7aep4r2bBU4q+3nsAUttcTiErmqlsW/AcpZAlxAMiLD2
CY9k0uBrWhMIbvE/kSO+S38nCujZR9M27RB8fg==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8f:a1:0a:69:b6:a8:7d:b1:33:6c:32:c2:15:3b:c3:19
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
        Validity
            Not Before: Sep 18 00:00:00 2024 GMT
            Not After : Sep 17 23:59:59 2039 GMT
        Subject: C = ES, O = Sectigo (Europe) SL, CN = Sectigo Qualified Website Authentication CA R39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Modulus:
                    00:c8:ee:d6:7a:ed:08:0c:f7:00:df:81:02:d2:a5:
                    2e:25:c1:fa:2c:19:c7:d1:6c:54:34:56:cc:04:f4:
                    8c:6d:da:a1:e8:62:e3:a1:a5:ae:6f:9d:09:f8:f3:
                    d4:82:88:55:db:0e:6c:8f:86:e1:e6:f2:3b:a3:52:
                    9e:9b:a1:27:df:2a:bf:46:cf:ef:25:cf:48:e3:f4:
                    dd:00:82:94:d2:68:ec:40:c5:8b:d1:0a:c0:68:4e:
                    f7:5c:9c:3b:de:6f:4f:b5:8d:16:66:1e:3e:37:06:
                    3b:a0:a8:90:ac:71:0b:8f:a0:83:e2:be:3b:0a:05:
                    72:e4:6a:85:ab:65:49:7b:17:d7:34:d3:6f:24:93:
                    1e:4a:84:9d:dc:03:f0:92:eb:0f:93:dc:e1:c5:17:
                    d8:e8:23:d6:3f:97:d1:1d:64:2f:92:f5:13:ff:8f:
                    db:1b:6d:da:29:ac:0a:26:05:8f:df:d2:17:7f:5d:
                    6e:14:ae:06:4a:36:50:50:b2:4a:68:40:f2:12:8b:
                    e6:e6:2a:60:72:14:50:dd:ad:b6:30:79:df:f5:9a:
                    e6:cf:df:77:5b:5a:23:33:9f:07:44:4f:31:a0:89:
                    14:5e:34:65:3c:84:0d:59:ec:49:6b:81:27:e0:19:
                    68:1a:c9:19:6a:af:7e:97:90:27:3f:a7:10:6e:28:
                    48:b3:82:29:d7:ad:2d:3b:2b:7b:ce:29:98:3f:c1:
                    7e:6b:f0:43:2d:2c:1f:00:ed:16:77:e7:86:c8:0d:
                    e4:71:c8:16:4b:77:77:7b:af:dc:21:23:58:90:2e:
                    3b:77:b2:fb:6e:24:9c:12:f4:02:d6:80:34:a1:e2:
                    66:75:1b:f3:c9:ed:46:54:55:be:1e:15:2c:fd:b8:
                    99:2d:72:64:7f:43:ed:9a:b3:92:a4:f6:a0:53:20:
                    8f:97:49:95:78:ae:1f:63:cc:f0:71:47:ca:fe:6e:
                    1e:6e:ab:d0:72:8f:ed:c1:fa:1e:79:20:db:60:3e:
                    38:b5:15:5d:46:5b:49:ef:06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
            X509v3 Subject Key Identifier: 
                2A:64:DA:5B:61:4B:84:BD:6C:2C:C1:25:4E:A4:15:E1:8C:65:10:63
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c
                OCSP - URI:http://ocsp.sectigo.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        68:b0:58:30:0b:12:8d:85:5a:52:83:b3:8e:4b:16:d0:ee:69:
        34:eb:c5:ca:ba:63:e2:42:d4:2d:fc:22:0a:e0:13:54:e3:3d:
        4d:6c:d2:51:82:32:42:ab:5c:79:f2:02:32:6b:28:5e:9a:69:
        ce:9c:83:53:c2:e1:a5:69:21:38:37:13:d6:09:c1:a2:be:7d:
        ef:24:84:0b:1f:fd:ba:65:aa:6f:02:0f:53:3e:3e:5a:2d:5d:
        a2:17:ea:30:30:a2:05:36:e8:67:6c:ca:3d:5a:8b:74:43:c8:
        bc:f8:09:78:a6:fa:eb:ee:24:60:97:c4:3e:10:c8:5e:29:63:
        08:6a:55:6c:b3:6e:e1:25:3c:8f:23:c1:88:2a:39:c7:36:a5:
        6c:25:5b:eb:c3:61:31:ca:f5:51:30:a7:0b:0b:5f:9a:8b:04:
        3f:e3:03:9e:86:17:5f:fe:9e:1e:dd:d1:3a:1e:f0:ca:44:89:
        1e:b0:6c:a9:7b:cd:6b:e7:fb:46:89:f0:20:62:b5:5f:08:13:
        f3:6a:31:00:45:47:96:aa:bc:61:66:f1:bf:96:6d:4b:c9:92:
        ca:52:87:a6:21:01:a0:69:1f:c6:92:e3:9d:73:22:d4:9d:f6:
        7d:0a:e0:66:69:30:f6:b3:10:40:6f:b4:54:07:bc:b8:0c:ae:
        91:df:e7:ef:5b:21:cb:8c:68:03:4a:99:95:5c:ea:53:3a:3a:
        fa:7a:14:22:02:7c:84:b7:22:3c:c2:5d:f4:68:67:95:da:8d:
        a7:c1:cb:8c:25:64:8e:db:89:79:72:28:92:07:94:ac:79:e8:
        e8:a0:21:50:dd:3e:9d:ba:70:75:24:fa:a5:cb:28:1d:d9:f2:
        c7:a3:f2:01:d1:a2:71:c8:ca:d3:da:98:3c:b4:60:b7:08:9b:
        83:a1:fe:80:57:dc:a8:4a:af:f1:5a:d5:45:b4:2b:a3:65:a5:
        4c:8c:4c:46:5e:31:65:e2:c5:92:71:cc:69:e7:99:88:e8:cd:
        82:3a:ed:3d:46:3a:84:81:38:92:f0:77:55:32:63:ed:a2:5d:
        8b:5b:bc:f8:ee:12:54:73:8b:ec:99:4b:43:0e:cf:e8:32:2d:
        bb:8f:4c:c7:6f:ce:59:95:72:6d:60:e9:aa:f2:b9:e1:ad:f4:
        dc:a5:57:fc:10:42:3f:71:6f:b3:75:12:49:47:90:3e:3d:3a:
        bf:ed:a7:a9:e2:bd:9b:05:4e:2a:fb:79:ec:01:4b:6d:71:38:
        84:ae:6a:a5:b1:6f:c0:72:96:40:97:10:0c:88:b0:f6:09:8f:
        64:d2:e0:6b:5a:13:08:6e:f1:3f:91:23:be:4b:7f:27:0a:e8:
        d9:47:d3:36:ed:10:7c:7e