Entrust PKI as a Service

Fingerprint

Paste the SHA-256 fingerprint (in hexadecimal format) of the entire root CA certificate in DER binary encoding (not in PEM). You can get this value from the certificate properties or run the following commands.

OS Command
Windows certutil -hashfile rootca.der SHA256
macOS openssl x509 -fingerprint -sha256 -noout -in rootca.crt | sed "s/[:]//g"

Mandatory: Yes. Always configure this field when possible.