TBS RSA Organization Validation Secure Server CA 4

Intermediate certificate used for the issuance of TBS X509 RSA server certificates from March 2026. Chained with Sectigo Public Server Authentication Root R46.

The CRL is available here:
http://crl.sectigo.com/TBSRSAOrganizationValidationSecureServerCA4.crl

It can be importing via this link:
http://www.tbs-x509.com/TBSRSAOrganizationValidationSecureServerCA4.crt

Or use the text version here under.

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ad:87:25:9f:8a:a4:60:f9:f8:f9:62:ce:ad:db:40
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
        Validity
            Not Before: Nov  6 00:00:00 2025 GMT
            Not After : Nov  5 23:59:59 2035 GMT
        Subject: C = GB, O = TBS INTERNET Ltd, CN = TBS RSA Organization Validation Secure Server CA 4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Modulus:
                    00:9c:0f:65:23:43:60:a6:8b:fe:03:13:af:6e:3a:
                    68:96:22:3b:64:76:bc:ea:7d:0f:a9:5b:33:28:23:
                    aa:65:26:a9:fa:2b:3c:66:95:7a:13:ee:41:82:f3:
                    99:df:71:a0:a8:b3:3c:44:a5:60:2f:b1:4a:d0:8e:
                    cf:80:ff:71:5b:f5:25:62:f4:8d:c1:b2:27:e4:c7:
                    43:9e:d7:b3:8d:d9:6f:8f:1a:e6:5f:4a:24:6f:24:
                    7f:55:88:a9:49:04:29:41:19:26:1d:9e:8c:22:ba:
                    bd:c3:52:97:4a:57:9c:9a:bd:bf:b3:61:86:63:b1:
                    c3:03:18:19:d8:69:93:18:5b:0b:c3:bb:e8:1a:2b:
                    70:27:43:d7:1c:4b:34:8f:54:0a:f3:a0:d1:2a:31:
                    cb:b8:c9:fc:fb:58:d4:81:3e:ea:76:f5:a7:f0:3e:
                    4a:00:44:9e:0e:99:92:ab:c2:73:3a:a4:0b:36:95:
                    d8:a8:9d:dc:15:55:f8:e7:a5:41:ba:3e:0b:9e:ba:
                    b2:cf:1d:12:4c:6e:ba:77:84:72:1a:5f:53:12:ca:
                    70:14:75:62:3f:57:e3:8f:ba:80:70:70:53:a5:eb:
                    b0:9f:f4:e1:be:0a:81:72:46:a9:51:e4:b0:55:cc:
                    2c:17:f5:ba:d0:e0:da:cb:09:5d:e6:5d:98:e2:ae:
                    12:72:89:f1:23:fc:d2:8b:d8:fd:a0:99:ca:9e:b9:
                    27:3c:94:82:1a:b5:65:fd:af:35:bf:16:b9:92:08:
                    fc:5b:5d:72:f4:1c:dd:f3:b2:28:08:03:46:82:9d:
                    2d:ae:fa:5f:bb:80:c6:06:27:35:25:d0:2d:93:f7:
                    10:28:64:df:56:48:8f:a5:1b:b7:a6:f6:dd:3a:58:
                    1d:42:8d:06:97:1d:b1:30:2a:a9:c9:97:5a:1b:e3:
                    ef:0d:ac:3e:bc:72:9a:01:d0:0d:c3:e3:4e:77:20:
                    76:85:6b:cf:49:f9:87:c9:6d:5a:1e:37:6c:89:b3:
                    22:a6:c0:8b:fd:4a:99:8c:2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
            X509v3 Subject Key Identifier: 
                03:54:EA:39:04:F7:1D:82:E4:10:D9:BC:EB:F7:A8:60:93:F9:92:BD
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c
                OCSP - URI:http://ocsp.sectigo.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        07:7c:39:35:1b:4b:1a:43:b3:1e:02:55:2d:94:65:01:2c:2a:
        1c:aa:2a:76:b8:26:a9:06:50:80:16:64:ad:d8:dc:8b:4d:cc:
        2a:74:53:87:0a:0f:b6:46:b2:61:36:0e:5e:52:2d:34:59:00:
        49:c8:21:35:f5:af:87:f4:55:1f:73:40:5d:bb:a5:5d:6b:16:
        72:2a:b8:35:ed:bc:c0:c9:2a:3d:00:2f:c5:9c:81:ba:f3:47:
        9d:5d:ff:85:38:7c:ea:72:f0:95:99:c6:d8:7c:62:b6:db:86:
        3e:98:3c:27:dd:da:9c:1d:79:36:1d:4e:29:22:79:29:ba:a3:
        09:8d:ce:62:9c:ff:61:3a:62:33:4c:f2:01:bb:c8:8b:f9:5e:
        3a:0e:11:11:36:b4:98:4f:43:ac:1e:e0:f1:19:24:ba:5d:7e:
        0f:94:6d:5b:78:84:21:f7:06:c2:4b:d9:55:68:94:71:3e:3d:
        99:5a:8c:7a:37:ef:31:ec:1b:f8:8a:33:90:b8:93:b0:d2:f6:
        7a:f8:cb:1a:b1:3a:67:f0:51:48:be:8f:4b:b7:6c:68:94:15:
        6f:a1:35:a4:64:92:0c:b4:0e:4b:5e:cb:ce:2e:30:e9:65:2e:
        63:70:92:b7:dd:83:e2:6b:0b:a5:f6:6c:0e:ca:33:45:52:1d:
        46:85:b6:75:38:89:3b:26:7e:b6:bb:59:29:6b:2e:2a:a1:79:
        3b:cb:d6:8e:a0:ea:36:bb:d6:da:4e:47:e4:32:3b:d8:c1:97:
        f7:72:aa:0e:f8:90:62:99:09:f7:62:c1:ad:b4:d2:d6:a4:ec:
        e1:d0:86:97:6a:bb:d7:43:7a:07:26:77:a5:23:0a:b7:c1:ca:
        cb:ca:6e:cd:37:19:ed:5a:73:d8:26:24:58:7b:2a:3c:cb:a0:
        f8:07:f6:27:45:ac:ad:62:13:1d:98:5a:2b:0f:1b:79:58:99:
        71:02:9d:7b:53:c8:1d:0f:6d:d1:5e:2e:3a:47:ec:7b:ac:7d:
        22:d8:d4:5a:65:ef:57:56:ca:24:a8:22:12:a6:59:07:a6:0a:
        fd:4a:00:a4:33:4d:26:48:ca:f7:2d:3d:cf:00:04:e6:9c:b3:
        cf:b3:40:98:75:55:fc:09:1c:82:ef:b9:0c:c6:ea:26:26:d8:
        98:fd:e7:65:7e:a7:d9:08:b0:ae:39:c3:43:df:3a:ef:0d:5e:
        a3:28:90:25:ef:07:2e:93:ce:7a:50:0e:24:47:31:af:df:1d:
        21:0f:ca:d5:96:76:a4:69:82:8d:5d:69:be:78:0f:6a:32:b4:
        29:2b:16:28:57:bd:c5:83:43:68:d2:32:3b:ec:d6:35:40:2f:
        5a:8d:40:f9:58:ba:39:f4