Certificates and CRLs

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft ECC Root Certificate Authority 2017

Thumbprint (sha1) :
999a64c37ff47d9fab95f14769891460eec4c3c5

crl

Microsoft RSA Root Certificate Authority 2017

Thumbprint (sha1) :
73a5e64a3bff8316ff0edccc618a906e4eae4d74
crt active expired revoked

crl

Microsoft EV ECC Root Certificate Authority 2017

Thumbprint (sha1) :
6b1937abfd64e1e40daf2262a27857c015d6228d
crt

crl

Microsoft EV RSA Root Certificate Authority 2017

Thumbprint (sha1) :
ada06e72393ccbe873648cf122a91c35ef4c984d
crt

crl

The following CAs are no longer issuing as of December 18, 2019

Microsoft ECC Root Certificate Authority 2017

Thumbprint (sha1) :
7CA9013D43721551E987380B3EAE4B442DC037EA

crt

crl

Microsoft RSA Root Certificate Authority 2017

Thumbprint (sha1) :
EE68C3E94AB5D55EB9395116424E25B0CADD9009
crt

crl

Microsoft EV ECC Root Certificate Authority 2017

Thumbprint (sha1) :
B8095F5A89FB47A7017ED794DD4F611E27830E27
crt

crl

Microsoft EV RSA Root Certificate Authority 2017

Thumbprint (sha1) :
3AD38A39CE4E88DCDF46995E969FC339D0799858
crt

crl

 

The following certificates have been crossed signed by DigiCert Global Root G2 (RSA):

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Azure TLS Issuing CA 01

Thumbprint (sha1) :
2f2877c5d778c31e0f29c7e371df5471bd673173
crt

crl

Microsoft Azure TLS Issuing CA 02

Thumbprint (sha1) :
e7eea674ca718e3befd90858e09f8372ad0ae2aa
crt

crl

Microsoft Azure TLS Issuing CA 05

Thumbprint (sha1) :
6c3af02e7f269aa73afd0eff2a88a4a1f04ed1e5
crt

crl

Microsoft Azure TLS Issuing CA 06

Thumbprint (sha1) :
30e01761ab97e59a06b41ef20af6f2de7ef4f7b0
crt

crl

Microsoft Azure RSA TLS Issuing CA 03

Thumbprint (sha1) :
f9388ea2c9b7d632b66a2b0b406df1d37d3901f6
crt

crl

Microsoft Azure RSA TLS Issuing CA 04

Thumbprint (sha1) :
be68d0adaa2345b48e507320b695d386080e5b25
crt

crl

Microsoft Azure RSA TLS Issuing CA 07

Thumbprint (sha1) :
3382517058a0c20228d598ee7501b61256a76442
crt

crl

Microsoft Azure RSA TLS Issuing CA 08

Thumbprint (sha1) :
31600991ed5fec63d355a5484a6dcc787ead89bc
crt

crl

 

The following certificates have been crossed signed by DigiCert Global Root G3 (ECC):

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Azure ECC TLS Issuing CA 01

Thumbprint (sha1) :
92503d0d74a7d3708197b6ee13082d52117a6ab0
crt

crl

Microsoft Azure ECC TLS Issuing CA 02

Thumbprint (sha1) :
1e981ccddc69102a45c6693ee84389c3cf2329f1
crt

crl

Microsoft Azure ECC TLS Issuing CA 05

Thumbprint (sha1) :
c6363570af8303cdf31c1d5ad81e19dbfe172531
crt

crl

Microsoft Azure ECC TLS Issuing CA 06

Thumbprint (sha1) :
7365adaedfea4909c1baadbab68719ad0c381163
crt

crl

Microsoft Azure ECC TLS Issuing CA 03

Thumbprint (sha1) :
56d955c849887874aa1767810366d90adf6c8536
crt

crl

Microsoft Azure ECC TLS Issuing CA 04

Thumbprint (sha1) :
fb73fdc24f06998e070a06b6afc78fdf2a155b25
crt

crl

Microsoft Azure ECC TLS Issuing CA 07

Thumbprint (sha1) :
3be6ca5856e3b9709056da51f32cbc8970a83e28
crt

crl

Microsoft Azure ECC TLS Issuing CA 08

Thumbprint (sha1) :
716df84638ac8e6eebe64416c8dd38c2a25f6630
crt

crl

 

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Third Party CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Identity Verification Root Certificate Authority 2020

Thumbprint (sha1) :
f40042e2e5f7e8ef8189fed15519aece42c3bfa2
crt

crl

Microsoft Public RSA Timestamping CA 2020

Thumbprint (sha1) :
27f0abac2877ba255f62b389b43ff539a0fb598e
crt

crl

 

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Corporate CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Root Certificate Authority 2010

Thumbprint (sha1) :
3B1EFD3A66EA28B16697394703A72CA340A05BD5
crt

crl

Microsoft Root Certificate Authority 2011

Thumbprint (sha1) :
8F43288AD272F3103B6FB1428485EA3014C0BCFE
crt

crl

Microsoft Time Stamp Root Certificate Authority 2014

Thumbprint (sha1) :
0119E81BE9A14CD8E22F40AC118C687ECBA3F4D8
crt

crl

Microsoft ECC Product Root Certificate Authority 2018

Thumbprint (sha1) :
06F1AA330B927B753A40E68CDF22E34BCBEF3352
crt

crl

Microsoft ECC TS Root Certificate Authority 2018

Thumbprint (sha1) :
31F9FC8BA3805986B721EA7295C65B3A44534274
crt

crl






Report Incident

 

Email Incident

centralpki@microsoft.com






Policy


Microsoft PKI Services Certificate Policy

Microsoft PKI Services CP v3.1.7

Microsoft PKI Services CP v3.1.6

Microsoft PKI Services CP v3.1.5

Microsoft PKI Services CP v3.1.4

Microsoft PKI Services CP v3.1.3

Microsoft PKI Services CP v3.1.2

Microsoft PKI Services CP v3.1.1

Microsoft PKI Services CP v3.1


Microsoft PKI Services Certification Practice Statement (CPS)

Microsoft PKI Services CPS v3.2.3

Microsoft PKI Services CPS v3.2.2

Microsoft PKI Services CPS v3.2.1

Microsoft PKI Services CPS v3.2.0

Microsoft PKI Services CPS v3.1.9

Microsoft PKI Services CPS v3.1.8

Microsoft PKI Services CPS v3.1.7

Microsoft PKI Services CPS v3.1.6

Microsoft PKI Services CPS v3.1.5

Microsoft PKI Services CPS v3.1.4

Microsoft PKI Services CPS v3.1.3

Microsoft PKI Services CPS v3.1.2

Microsoft PKI Services CPS v3.1.1

Microsoft PKI Services CPS v3.1


Microsoft PKI Services Third Party Certification Practice Statement (CPS)

Microsoft PKI Services Third Party CPS v1.0.2


Microsoft PKI Services Corporate Certification Practice Statement (CPS)

Microsoft PKI Services Corporate CPS v3.1.7


Microsoft PKI Services Subscriber Agreement

Microsoft PKI Services Subscriber Agreement


Microsoft PKI Services Relying Party Agreement

Microsoft PKI Services Relying Party Agreement


Privacy Policy

Microsoft Privacy Policy






Audit

WebTrust Audits - MS PKI Services Audit Period runs from May 1 to April 30 each year

2023 Audits

Audit Description Latest WebTrust Seal Latest Audit Letters Applicable CPS (see Policy Section above for latest version)
WTCA Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11178 Microsoft PKI WTCA Indp Acct Opinion and Mgmt Assertion June 2023 - FINAL Microsoft PKI Services Certification Practice Statement (CPS)
WTCA Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11178 Microsoft PKI ACS WTCA Indp Acct Opinion and Mgmt Assertion June 2023 - FINAL Microsoft PKI Services Third Party Certification Practice Statement (CPS)
WTCA Microsoft Trusted Root Store Only https://www.cpacanada.ca/webtrustseal?sealid=11178 Microsoft TRP WTCA Indp Acct Opinion and Mgmt Assertion June 2023 - FINAL Microsoft PKI Services Corporate Certification Practice Statement (CPS)
WTCA Microsoft Internal Hierarchies n/a Microsoft Internal Only WTCA Indp Acct Opinion and Mgmt Assertion June 2023 - FINAL Microsoft PKI Services Corporate Certification Practice Statement (CPS)
WTBR Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11179 Microsoft PKI WTBR Indp Acct Opinion and Mgmt Assertion June 2023 - FINAL Microsoft PKI Services Certification Practice Statement (CPS)
WTCS BR Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11180 Microsoft PKI ACS WTCS BR Indp Acct Opinion and Mgmt Assertion June 2023 - FINAL Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Auditor Qualifications Auditor Qualifications WTCA Engagement