PKI Repository - Microsoft PKI Services

Certificates and CRLs

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Public TLS CPS on this page.

Certificate Authority	Certificate	Certificate Revocation List
Microsoft TLS RSA Root G2	Thumbprint (sha1) : 21734d95a2473be25cbfd12a84c6fbc5bc8e2414 crt	crl
Microsoft TLS ECC Root G2	Thumbprint (sha1) : f82bb951ba6b8a85adfa7515028560d1250e7237 crt	crl
Microsoft ECC Root Certificate Authority 2017	Thumbprint (sha1) : 999a64c37ff47d9fab95f14769891460eec4c3c5 crt active expired revoked	crl
Microsoft RSA Root Certificate Authority 2017	Thumbprint (sha1) : 73a5e64a3bff8316ff0edccc618a906e4eae4d74 crt active expired revoked	crl
Microsoft EV ECC Root Certificate Authority 2017	Thumbprint (sha1) : 6b1937abfd64e1e40daf2262a27857c015d6228d crt	crl
Microsoft EV RSA Root Certificate Authority 2017	Thumbprint (sha1) : ada06e72393ccbe873648cf122a91c35ef4c984d crt	crl
Microsoft Azure ECC TLS Issuing CA 03	Thumbprint (sha1) : 91503BE7BF74E2A10AA078B48B71C3477175FEC3 crt	crl
Microsoft Azure ECC TLS Issuing CA 04	Thumbprint (sha1) : 406E3B38EFF35A727F276FE993590B70F8224AED crt	crl
Microsoft Azure ECC TLS Issuing CA 07	Thumbprint (sha1) : AB3490B7E37B3A8A1E715036522AB42652C3CFFE crt	crl
Microsoft Azure ECC TLS Issuing CA 08	Thumbprint (sha1) : CF33D5A1C2F0355B207FCE940026E6C1580067FD crt	crl
Microsoft TLS G1 ECC CA 01	Thumbprint (sha1) : 3b3e7a58efb44de6b6c082c040856164ec497ddb crt	crl
Microsoft TLS G1 ECC CA 02	Thumbprint (sha1) : 0c4fb44bca5fadc60236aa4e59eaffa918c27eae crt	crl
Microsoft Azure RSA TLS Issuing CA 03	Thumbprint (sha1) : 37461AACFA5970F7F2D2BAC5A659B53B72541C68 crt	crl
Microsoft Azure RSA TLS Issuing CA 04	Thumbprint (sha1) : 7304022CA8A9FF7E3E0C1242E0110E643822C45E crt	crl
Microsoft Azure RSA TLS Issuing CA 07	Thumbprint (sha1) : 0E5F41B697DAADD808BF55AD080350A2A5DFCA93 crt	crl
Microsoft Azure RSA TLS Issuing CA 08	Thumbprint (sha1) : 512C8F3FB71EDACF7ADA490402E710B10C73026E crt	crl
Microsoft TLS G1 RSA CA 01	Thumbprint (sha1) : 1e55c61e60901a618ab3c3a85e30c1f04e23fa01 crt	crl
Microsoft TLS G1 RSA CA 02	Thumbprint (sha1) : e3bced4268339cf8c1be26e115115167a57b308c crt	crl
Microsoft TLS G1 RSA CA 03	Thumbprint (sha1) : 1762e5ea07c20ceb258eca877855821bd700bc0b crt	crl
Microsoft TLS G1 RSA CA 04	Thumbprint (sha1) : a23f32682dd689977a3baeb350f69b11379d51a4 crt	crl
Microsoft ECC TLS Issuing AOC CA 01	Thumbprint (sha1) : 30ab5c33eb4b77d4cbff00a11ee0a7507d9dd316 crt	crl
Microsoft ECC TLS Issuing AOC CA 02	Thumbprint (sha1) : 3709cd92105d074349d00ea8327f7d5303d729c8 crt	crl
Microsoft ECC TLS Issuing EOC CA 01	Thumbprint (sha1) : 5fa13b879b2ad1b12e69d476e6cad90d01013b46 crt	crl
Microsoft ECC TLS Issuing EOC CA 02	Thumbprint (sha1) : 58a1d8b1056571d32be6a7c77ed27f73081d6e7a crt	crl
Microsoft RSA TLS Issuing AOC CA 01	Thumbprint (sha1) : 4697fdbed95739b457b347056f8f16a975baf8ee crt	crl
Microsoft RSA TLS Issuing AOC CA 02	Thumbprint (sha1) : 90ed2e9cb40d0cb49a20651033086b1ea2f76e0e crt	crl
Microsoft RSA TLS Issuing EOC CA 01	Thumbprint (sha1) : a04d3750debfccf1259d553dbec33162c6b42737 crt	crl
Microsoft RSA TLS Issuing EOC CA 02	Thumbprint (sha1) : 697c6404399cc4e7bb3c0d4a8328b71dd3205563 crt	crl
Microsoft TLS G2 RSA CA OCSP 02	Thumbprint (sha1) : f8a408b8fbeea077b75738658641be77154720eb crt	crl
Microsoft TLS G2 RSA CA OCSP 04	Thumbprint (sha1) : da6d0400641b45aecc595d24e5037aa6bc09c358 crt	crl
Microsoft TLS G2 RSA CA OCSP 06	Thumbprint (sha1) : 88283c78d08489718f78cd2b797333765164e911 crt	crl
Microsoft TLS G2 RSA CA OCSP 08	Thumbprint (sha1) : ddbd3da5c09386cc36cfec4680f17084ba7a5628 crt	crl
Microsoft TLS G2 RSA CA OCSP 10	Thumbprint (sha1) : b663d8413ca35f3f22643ccbc2d3250700916b1a crt	crl
Microsoft TLS G2 RSA CA OCSP 12	Thumbprint (sha1) : d3089df9f47490887045b91d3fdef6ed87f02f52 crt	crl
Microsoft TLS G2 RSA CA OCSP 14	Thumbprint (sha1) : 55d9b33bdc16ddb3b663f1771f96d4324c118073 crt	crl
Microsoft TLS G2 RSA CA OCSP 16	Thumbprint (sha1) : 27e6663299d340dfe54571ceccec01be74495dc6 crt	crl
Microsoft TLS G2 ECC CA OCSP 02	Thumbprint (sha1) : 336d3e5451315294f6e1e7cfda84e51c8b1e4054 crt	crl
Microsoft TLS G2 ECC CA OCSP 04	Thumbprint (sha1) : 5bff3cc51fb9c1cce0d52f754427347545e583c5 crt	crl
Microsoft TLS G2 ECC CA OCSP 06	Thumbprint (sha1) : 9bc57546acbdb29e388cd1791b43de4f659b844b crt	crl
Microsoft TLS G2 ECC CA OCSP 08	Thumbprint (sha1) : f1c0a1828c10b43f9c651fdfc494832174be8d07 crt	crl
*The following CAs are no longer issuing as of December 18, 2019*
Microsoft ECC Root Certificate Authority 2017	Thumbprint (sha1) : 7CA9013D43721551E987380B3EAE4B442DC037EA crt	crl
Microsoft RSA Root Certificate Authority 2017	Thumbprint (sha1) : EE68C3E94AB5D55EB9395116424E25B0CADD9009 crt	crl
Microsoft EV ECC Root Certificate Authority 2017	Thumbprint (sha1) : B8095F5A89FB47A7017ED794DD4F611E27830E27 crt	crl
Microsoft EV RSA Root Certificate Authority 2017	Thumbprint (sha1) : 3AD38A39CE4E88DCDF46995E969FC339D0799858 crt	crl

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Azure RSA TLS Issuing CA 03	Thumbprint (sha1) : f9388ea2c9b7d632b66a2b0b406df1d37d3901f6 crt	crl
Microsoft Azure RSA TLS Issuing CA 04	Thumbprint (sha1) : be68d0adaa2345b48e507320b695d386080e5b25 crt	crl
Microsoft Azure RSA TLS Issuing CA 07	Thumbprint (sha1) : 3382517058a0c20228d598ee7501b61256a76442 crt	crl
Microsoft Azure RSA TLS Issuing CA 08	Thumbprint (sha1) : 31600991ed5fec63d355a5484a6dcc787ead89bc crt	crl
Microsoft TLS G1 RSA CA 01	Thumbprint (sha1) : ec6cd9ecad93d6140d629c9b337286cdb60fe51d crt	crl
Microsoft TLS G1 RSA CA 02	Thumbprint (sha1) : 22f3665cb48a06a0ceef83bdc703705d401f83bb crt	crl
Microsoft TLS G1 RSA CA 03	Thumbprint (sha1) : ca413e2907f4d848ed2542e82c20f673f913eb05 crt	crl
Microsoft TLS G1 RSA CA 04	Thumbprint (sha1) : b485338bd71dcf4c552237773d3c69e2823726ae crt	crl
Microsoft TLS RSA Root G2	Thumbprint (sha1) : b5ee89e77326ab2bf1775bd99c19a28947ff8184 crt	crl
Microsoft TLS G2 RSA CA OCSP 02	Thumbprint (sha1) : f8a408b8fbeea077b75738658641be77154720eb crt	crl
Microsoft TLS G2 RSA CA OCSP 04	Thumbprint (sha1) : da6d0400641b45aecc595d24e5037aa6bc09c358 crt	crl
Microsoft TLS G2 RSA CA OCSP 06	Thumbprint (sha1) : 88283c78d08489718f78cd2b797333765164e911 crt	crl
Microsoft TLS G2 RSA CA OCSP 08	Thumbprint (sha1) : ddbd3da5c09386cc36cfec4680f17084ba7a5628 crt	crl
Microsoft TLS G2 RSA CA OCSP 10	Thumbprint (sha1) : b663d8413ca35f3f22643ccbc2d3250700916b1a crt	crl
Microsoft TLS G2 RSA CA OCSP 12	Thumbprint (sha1) : d3089df9f47490887045b91d3fdef6ed87f02f52 crt	crl
Microsoft TLS G2 RSA CA OCSP 14	Thumbprint (sha1) : 55d9b33bdc16ddb3b663f1771f96d4324c118073 crt	crl
Microsoft TLS G2 RSA CA OCSP 16	Thumbprint (sha1) : 27e6663299d340dfe54571ceccec01be74495dc6 crt	crl

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Azure ECC TLS Issuing CA 03	Thumbprint (sha1) : 56d955c849887874aa1767810366d90adf6c8536 crt	crl
Microsoft Azure ECC TLS Issuing CA 04	Thumbprint (sha1) : fb73fdc24f06998e070a06b6afc78fdf2a155b25 crt	crl
Microsoft Azure ECC TLS Issuing CA 07	Thumbprint (sha1) : 3be6ca5856e3b9709056da51f32cbc8970a83e28 crt	crl
Microsoft Azure ECC TLS Issuing CA 08	Thumbprint (sha1) : 716df84638ac8e6eebe64416c8dd38c2a25f6630 crt	crl
Microsoft TLS G1 ECC CA 01	Thumbprint (sha1) : f79e31b6ee9aad0e7d830cb4490ef020c2ad2bc2 crt	crl
Microsoft TLS G1 ECC CA 02	Thumbprint (sha1) : ff24ce2b3c3e2249288d22a64d025e9fa8eed165 crt	crl
Microsoft TLS ECC Root G2	Thumbprint (sha1) : 7fa05acf9b4aabb0de0cfafa297ddf92fdc5f3f5 crt	crl
Microsoft TLS G2 ECC CA OCSP 02	Thumbprint (sha1) : 336d3e5451315294f6e1e7cfda84e51c8b1e4054 crt	crl
Microsoft TLS G2 ECC CA OCSP 04	Thumbprint (sha1) : 5bff3cc51fb9c1cce0d52f754427347545e583c5 crt	crl
Microsoft TLS G2 ECC CA OCSP 06	Thumbprint (sha1) : 9bc57546acbdb29e388cd1791b43de4f659b844b crt	crl
Microsoft TLS G2 ECC CA OCSP 08	Thumbprint (sha1) : f1c0a1828c10b43f9c651fdfc494832174be8d07 crt	crl

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Third Party CPS on this page.

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Identity Verification Root Certificate Authority 2020	Thumbprint (sha1) : f40042e2e5f7e8ef8189fed15519aece42c3bfa2 crt
Microsoft Public RSA Timestamping CA 2020	Thumbprint (sha1) : 27f0abac2877ba255f62b389b43ff539a0fb598e crt

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Corporate CPS on this page.

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Root Certificate Authority 2010	Thumbprint (sha1) : 3B1EFD3A66EA28B16697394703A72CA340A05BD5 crt	crl
Microsoft Root Certificate Authority 2011	Thumbprint (sha1) : 8F43288AD272F3103B6FB1428485EA3014C0BCFE crt	crl
Microsoft Time Stamp Root Certificate Authority 2014	Thumbprint (sha1) : 0119E81BE9A14CD8E22F40AC118C687ECBA3F4D8 crt	crl
Microsoft ECC Product Root Certificate Authority 2018	Thumbprint (sha1) : 06F1AA330B927B753A40E68CDF22E34BCBEF3352 crt	crl
Microsoft ECC TS Root Certificate Authority 2018	Thumbprint (sha1) : 31F9FC8BA3805986B721EA7295C65B3A44534274 crt	crl

Certificates and CRLs

Report Incident

Policy

Audit