X.509 certificate fingerprint

ID x509_certificate_fingerprint

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Hash of the DER encoding of an X.509 certificate, as shown by browsers, certificate stores and openssl x509 -fingerprint: hexadecimal octets separated by colons, 20 octets for SHA-1 and 32 octets for SHA-256. The same value without separators looks like a plain SHA-1 or SHA-256 hash.

Categories: Cryptographic identifiers
Countries: Global (not tied to a country)
Languages: Common to most languages
Quality: 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
Metacrafter rules: no detection rule yet
Supported by tools: no tool record lists this type yet

Regular expression

^[0-9A-Fa-f]{2}(?::[0-9A-Fa-f]{2}){19}(?:(?::[0-9A-Fa-f]{2}){12})?$

Python re syntax.

Examples

Value	Description
FF:2D:1B:4E:E9:CD:62:5A:52:CA:49:AF:A1:97:4E:A3:3F:09:ED:35:DB:8E:55:4D:F0:EC:7D:4C:73:A7:72:F2	SHA-256 fingerprint of the example certificate of RFC 7468, section 5.1
AE:C4:60:61:F4:58:FC:B5:6E:20:4A:11:79:DE:BB:CF:23:7F:1C:53	SHA-1 fingerprint of the same certificate
AE:C4:60:61:F4:58:FC:B5:6E:20:4A:11:79:DE:BB:CF:23:7F:1C invalid	one octet short (19 instead of 20)

Sources

Use this record

Page URL: http://registry.apicrafter.io/datatype/x509_certificate_fingerprint
JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
Improve it: edit data/datatypes/any/cryptography/x509_certificate_fingerprint.yaml on GitHub