A certificate fingerprint is a short cryptographic digest, usually shown as a hex string, computed from a digital certificate. It acts like a compact identifier: if two fingerprints match, the certificates are the same byte-for-byte, and if they differ, the certificates are different. Security teams use fingerprints to compare certificates quickly without inspecting every field.
In cyber security, fingerprints matter because reused certificates can reveal shared administration, cloned systems, or common provisioning pipelines. Defenders compare fingerprints across servers, domains, and network logs to group related infrastructure and spot unexpected overlap. Attackers may also reuse certificates or keys across hosts, which can help analysts correlate systems even when hostnames and IP addresses change. A fingerprint is strong evidence of identical certificate material, but it does not by itself prove compromise or attribute intent.