TBS ECC Organization Validation Secure Server CA 4

Intermediate certificate used for the issuance of TBS X509 ECC server certificates from March 2026. Chained Sectigo Public Server Authentication Root E46.

The CRL is available here:
http://crl.sectigo.com/TBSECCOrganizationValidationSecureServerCA4.crl

It can be importing via this link:
http://www.tbs-x509.com/TBSECCOrganizationValidationSecureServerCA4.crt

Or use the text version here under.

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cc:e6:13:df:a1:13:82:43:87:0a:6c:ea:0f:8b:f2:63
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root E46
        Validity
            Not Before: Nov  6 00:00:00 2025 GMT
            Not After : Nov  5 23:59:59 2035 GMT
        Subject: C = GB, O = TBS INTERNET Ltd, CN = TBS ECC Organization Validation Secure Server CA 4
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:ef:b5:ea:5d:b4:72:9f:22:37:61:cd:ee:d4:5a:
                    2a:f8:eb:e9:ef:91:53:26:0f:05:81:61:0c:c0:ef:
                    a5:cc:6a:75:04:45:c8:cf:41:28:c7:d9:55:61:1a:
                    1e:79:e0:1b:4a:43:2a:2f:aa:f0:55:f6:5a:b2:78:
                    24:3d:78:48:63
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
            X509v3 Subject Key Identifier: 
                F7:8E:CB:3E:13:92:96:4C:4B:BF:DF:97:7E:66:3D:FE:51:8F:DE:5C
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c
                OCSP - URI:http://ocsp.sectigo.com
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:2d:47:25:84:1e:52:37:be:71:63:26:31:b7:2b:
        f3:ec:76:87:36:f4:3d:ab:56:cc:04:a6:00:b4:30:3c:c9:cd:
        6c:f0:0f:c8:70:b8:96:ce:ff:f1:61:fd:0d:93:65:72:02:30:
        50:1b:fe:a0:eb:43:4b:30:d1:17:2a:e0:19:59:2b:54:af:dc:
        1f:91:20:db:cb:a2:05:cd:7c:6a:69:68:95:a0:93:76:e8:45:
        d2:ba:ee:68:f0:11:35:ec:74:e7:9e:6b