Thawte

Overview

Thawte was founded in 1995 in South Africa, making it one of the world's earliest commercial Certificate Authorities — predating Let's Encrypt (2015) by 20 years and contemporaneous with VeriSign. Following DigiCert's acquisition of the Symantec CA business (including Thawte and GeoTrust brands) in 2017, Thawte's operations have been consolidated into DigiCert's US headquarters. Today, Thawte operates as a sub-brand within the DigiCert portfolio, positioned alongside GeoTrust in the mid-range SSL certificate segment.

In the SSL Certificate market, Thawte targets organizations that value brand heritage — particularly in Africa where its South African origin remains a differentiating factor. Thawte also maintains a presence in the code signing certificate market, leveraging DigiCert's enterprise-grade infrastructure.

Key Strengths

• 25+ Years of Brand Heritage: Founded in the early internet era (1995), Thawte has accumulated over 25 years of SSL/TLS operational history. Its brand is deeply recognized in South Africa and across African markets, where it is often regarded as part of the local internet infrastructure. Thawte's legacy root certificates are pre-installed on over 5 billion devices worldwide.
• Unique Africa Market Position: Thawte is one of the very few global CAs with origins in Africa. It enjoys higher brand awareness in South Africa, Nigeria, Kenya, and other African markets due to early channel partnerships and localized marketing. Websites and applications targeting African users may benefit from this regional recognition.
• DigiCert Root Trust Chain: All Thawte certificates share DigiCert's globally trusted root certificate infrastructure, achieving over 99.9% browser and device compatibility. Certificates support SHA-256 signature algorithms and comply with the latest CA/Browser Forum baseline requirements — the same technical quality as DigiCert's main brand.
• Complete Certificate Portfolio: Offers a full range of validation levels and use cases, from basic DV to extended validation EV, plus wildcard and code signing certificates suitable for enterprise HTTPS deployment and software distribution.

Product Ecosystem

DV Certificates

Domain Validation certificates starting at $50/yr. Domain ownership verification via email, DNS TXT, or HTTP file upload. Issuance in 1-2 business days. Suitable for basic encryption needs on personal or informational sites.

OV Certificates

Organization Validation certificates starting at $80/yr. Includes business registration verification with 3-5 business day issuance. Displays organizational identity in certificate details. Appropriate for corporate websites and business-facing portals.

EV Certificates

Extended Validation certificates starting at $200/yr. Independent auditor verification of the organization. Displays company name in the browser address bar. Issuance in 3-7 business days. Recommended for e-commerce and financial platforms requiring maximum user trust.

Wildcard Certificates

Wildcard DV certificates starting at $200/yr. Protects the primary domain and all first-level subdomains. Useful for organizations managing multiple subdomains under a single certificate.

Code Signing Certificates

Code signing certificates starting at $250/yr. Digitally sign software code to verify publisher identity and ensure code integrity. Supports Microsoft Authenticode, Adobe AIR, and Java signing standards.

Limitations

• Brand Independence Lost: Since 2021, Thawte has ceased issuing certificates under its own root — all new certificates use DigiCert roots. From a technical trust perspective, Thawte = GeoTrust = DigiCert, with brand differences existing only at the marketing and pricing level. Organizations seeking an independent CA may find Sectigo or GlobalSign more suitable.
• Limited Product Differentiation: Thawte's product line overlaps almost completely with GeoTrust's — both offer DV/OV/EV + wildcard + code signing at similar price points. Without a distinctive feature like GeoTrust's QuickSSL Premium, Thawte is easily substituted in comparison scenarios.
• Premium Pricing: OV at $80/yr and EV at $200/yr carry a notable premium over Sectigo OV ($60/yr) and GlobalSign EV ($150/yr). Given identical infrastructure to GeoTrust and weaker brand pull than DigiCert main brand, this pricing is difficult to justify for budget-conscious buyers.
• Diminishing Africa Advantage: While Thawte's South African origins remain central to its brand narrative, engineering, sales, and support have largely relocated to the US and Europe. Response times and service quality in Africa now match other DigiCert sub-brands, making the heritage more of a brand story than an operational differentiator.

Use Cases

Pricing

FAQ

• Is Thawte still independently operated? No. Since 2017, Thawte has been part of DigiCert following the Symantec CA acquisition. It no longer operates with independent roots or a separate product roadmap; see CDN and SSL/TLS configuration best practices.
• What is the difference between Thawte and GeoTrust? Both are DigiCert sub-brands with identical technical infrastructure. The primary difference is brand heritage — Thawte emphasizes its South African origins, while GeoTrust focuses on QuickSSL Premium rapid issuance; see CDN and SSL/TLS configuration best practices.
• Does Thawte offer wildcard certificates? Yes. Thawte wildcard DV certificates start at approximately $200/yr, protecting the primary domain and all first-level subdomains; see CDN and SSL/TLS configuration best practices. Wildcard EV is not currently available.
• Are Thawte code signing certificates reliable? Yes. Thawte code signing certificates are issued under DigiCert roots, supporting Microsoft Authenticode and Adobe AIR signing standards, and are compatible with Windows kernel-mode driver signing; see CDN and SSL/TLS configuration best practices.