A hash — today almost always SHA-1 or SHA-256 — computed over a certificate's encoded bytes, used as a convenient unique identifier. It is not part of the certificate itself; tools calculate it on the fly, which is why the same certificate always shows the same thumbprint. Thumbprints are used to pin, look up or reference certificates in configuration, such as selecting a certificate in Windows stores.