@@ -6,7 +6,7 @@ ms.service: security
6
6
ms.subservice : security-fundamentals
7
7
ms.custom : devx-track-extended-java
8
8
ms.topic : conceptual
9
- ms.date : 07/12 /2024
9
+ ms.date : 07/22 /2024
10
10
ms.author : sarahlipsey
11
11
author : shlipsey3
12
12
manager : amycolannino
@@ -21,6 +21,7 @@ This article outlines the specific root and subordinate Certificate Authorities
21
21
Any entity trying to access Microsoft Entra identity services via the TLS/SSL protocols will be presented with certificates from the CAs listed in this article. Different services may use different root or intermediate CAs. The following root and subordinate CAs are relevant to entities that use [ certificate pinning] ( certificate-pinning.md ) .
22
22
23
23
** How to read the certificate details:**
24
+
24
25
- The Serial Number (top string in the table) contains the hexadecimal value of the certificate serial number.
25
26
- The Thumbprint (bottom string in the table) is the SHA1 thumbprint.
26
27
- CAs listed in italics are the most recently added CAs.
@@ -44,22 +45,16 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
44
45
| ---- | ---- |
45
46
| [ DigiCert Basic RSA CN CA G2] ( https://crt.sh/?d=2545289014 ) | 0x02f7e1f982bad009aff47dc95741b2f6<br >4D1FA5D1FB1AC3917C08E43F65015E6AEA571179 |
46
47
| [ DigiCert Cloud Services CA-1] ( https://crt.sh/?d=12624881 ) | 0x019ec1c6bd3f597bb20c3338e551d877<br >81B68D6CD2F221F8F534E677523BB236BBA1DC56 |
48
+ | [ DigiCert Cloud Services CA-1] ( https://crt.sh/?d=B3F6B64A07BB9611F47174407841F564FB991F29 ) | 0f171a48c6f223809218cd2ed6ddc0e8<br >b3f6b64a07bb9611f47174407841f564fb991f29 |
47
49
| [ DigiCert SHA2 Secure Server CA] ( https://crt.sh/?d=3422153451 ) | 0x02742eaa17ca8e21c717bb1ffcfd0ca0<br >626D44E704D1CEABE3BF0D53397464AC8080142C |
48
50
| [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( https://crt.sh/?d=3422153452 ) | 0x0a275fe704d6eecb23d5cd5b4b1a4e04<br >51E39A8BDB08878C52D6186588A0FA266A69CF28 |
49
51
| [ DigiCert TLS RSA SHA256 2020 CA1] ( https://crt.sh/?d=4385364571 ) | 0x06d8d904d5584346f68a2fa754227ec4<br >1C58A3A8518E8759BF075B76B750D4F2DF264FCD |
52
+ | [ DigiCert TLS RSA SHA256 2020 CA1] ( https://crt.sh/?d=6938FD4D98BAB03FAADB97B34396831E3780AEA1 ) | 0a3508d55c292b017df8ad65c00ff7e4<br >6938fd4d98bab03faadb97b34396831e3780aea1 |
50
53
| [ GeoTrust Global TLS RSA4096 SHA256 2022 CA1] ( https://crt.sh/?d=6670931375 ) | 0x0f622f6f21c2ff5d521f723a1d47d62d<br >7E6DB7B7584D8CF2003E0931E6CFC41A3A62D3DF |
51
- | [ Microsoft Azure ECC TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2001.cer ) | 0x09dc42a5f574ff3a389ee06d5d4de440<br >92503D0D74A7D3708197B6EE13082D52117A6AB0 |
52
- | [ Microsoft Azure ECC TLS Issuing CA 01] ( https://crt.sh/?d=2616305805 ) | 0x330000001aa9564f44321c54b900000000001a<br >CDA57423EC5E7192901CA1BF6169DBE48E8D1268 |
53
- | [ Microsoft Azure ECC TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2002.cer ) | 0x0e8dbe5ea610e6cbb569c736f6d7004b<br >1E981CCDDC69102A45C6693EE84389C3CF2329F1 |
54
- | [ Microsoft Azure ECC TLS Issuing CA 02] ( https://crt.sh/?d=2616326233 ) | 0x330000001b498d6736ed5612c200000000001b<br >489FF5765030EB28342477693EB183A4DED4D2A6 |
55
54
| [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x01529ee8368f0b5d72ba433e2d8ea62d<br >56D955C849887874AA1767810366D90ADF6C8536 |
56
55
| [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003322a2579b5e698bcc000000000033<br >91503BE7BF74E2A10AA078B48B71C3477175FEC3 |
57
56
| [ Microsoft Azure ECC TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2004%20-%20xsign.crt ) | 0x02393d48d702425a7cb41c000b0ed7ca<br >FB73FDC24F06998E070A06B6AFC78FDF2A155B25 |
58
57
| [ Microsoft Azure ECC TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2004.crt ) | 0x33000000322164aedab61f509d000000000032<br >406E3B38EFF35A727F276FE993590B70F8224AED |
59
- | [ Microsoft Azure ECC TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2005.cer ) | 0x0ce59c30fd7a83532e2d0146b332f965<br >C6363570AF8303CDF31C1D5AD81E19DBFE172531 |
60
- | [ Microsoft Azure ECC TLS Issuing CA 05] ( https://crt.sh/?d=2616326161 ) | 0x330000001cc0d2a3cd78cf2c1000000000001c<br >4C15BC8D7AA5089A84F2AC4750F040D064040CD4 |
61
- | [ Microsoft Azure ECC TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2006.cer ) | 0x066e79cd7624c63130c77abeb6a8bb94<br >7365ADAEDFEA4909C1BAADBAB68719AD0C381163 |
62
- | [ Microsoft Azure ECC TLS Issuing CA 06] ( https://crt.sh/?d=2616326228 ) | 0x330000001d0913c309da3f05a600000000001d<br >DFEB65E575D03D0CC59FD60066C6D39421E65483 |
63
58
| [ Microsoft Azure ECC TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2007%20-%20xsign.crt ) | 0x0f1f157582cdcd33734bdc5fcd941a33<br >3BE6CA5856E3B9709056DA51F32CBC8970A83E28 |
64
59
| [ Microsoft Azure ECC TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2007.crt ) | 0x3300000034c732435db22a0a2b000000000034<br >AB3490B7E37B3A8A1E715036522AB42652C3CFFE |
65
60
| [ Microsoft Azure ECC TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0ef2e5d83681520255e92c608fbc2ff4<br >716DF84638AC8E6EEBE64416C8DD38C2A25F6630 |
@@ -72,14 +67,6 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
72
67
| [ Microsoft Azure RSA TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crt ) | 0x330000003bf980b0c83783431700000000003b<br >0E5F41B697DAADD808BF55AD080350A2A5DFCA93 |
73
68
| [ Microsoft Azure RSA TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0efb7e547edf0ff1069aee57696d7ba0<br >31600991ED5FEC63D355A5484A6DCC787EAD89BC |
74
69
| [ Microsoft Azure RSA TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crt ) | 0x330000003a5dc2ffc321c16d9b00000000003a<br >512C8F3FB71EDACF7ADA490402E710B10C73026E |
75
- | [ Microsoft Azure TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.cer ) | 0x0aafa6c5ca63c45141ea3be1f7c75317<br >2F2877C5D778C31E0F29C7E371DF5471BD673173 |
76
- | [ Microsoft Azure TLS Issuing CA 01] ( https://crt.sh/?d=2616326024 ) | 0x1dbe9496f3db8b8de700000000001d<br >B9ED88EB05C15C79639493016200FDAB08137AF3 |
77
- | [ Microsoft Azure TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.cer ) | 0x0c6ae97cced599838690a00a9ea53214<br >E7EEA674CA718E3BEFD90858E09F8372AD0AE2AA |
78
- | [ Microsoft Azure TLS Issuing CA 02] ( https://crt.sh/?d=2616326032 ) | 0x330000001ec6749f058517b4d000000000001e<br >C5FB956A0E7672E9857B402008E7CCAD031F9B08 |
79
- | [ Microsoft Azure TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.cer ) | 0x0d7bede97d8209967a52631b8bdd18bd<br >6C3AF02E7F269AA73AFD0EFF2A88A4A1F04ED1E5 |
80
- | [ Microsoft Azure TLS Issuing CA 05] ( https://crt.sh/?d=2616326057 ) | 0x330000001f9f1fa2043bc28db900000000001f<br >56F1CA470BB94E274B516A330494C792C419CF87 |
81
- | [ Microsoft Azure TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.cer ) | 0x02e79171fb8021e93fe2d983834c50c0<br >30E01761AB97E59A06B41EF20AF6F2DE7EF4F7B0 |
82
- | [ Microsoft Azure TLS Issuing CA 06] ( https://crt.sh/?d=2616330106 ) | 0x3300000020a2f1491a37fbd31f000000000020<br >8F1FD57F27C828D7BE29743B4D02CD7E6E5F43E6 |
83
70
| [ Microsoft ECC TLS Issuing AOC CA 01] ( https://crt.sh/?d=4789656467 ) | 0x33000000282bfd23e7d1add707000000000028<br >30ab5c33eb4b77d4cbff00a11ee0a7507d9dd316 |
84
71
| [ Microsoft ECC TLS Issuing AOC CA 02] ( https://crt.sh/?d=4814787086 ) | 0x33000000290f8a6222ef6a5695000000000029<br >3709cd92105d074349d00ea8327f7d5303d729c8 |
85
72
| [ Microsoft ECC TLS Issuing EOC CA 01] ( https://crt.sh/?d=4814787088 ) | 0x330000002a2d006485fdacbfeb00000000002a<br >5fa13b879b2ad1b12e69d476e6cad90d01013b46 |
@@ -108,30 +95,18 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
108
95
| └ [ DigiCert TLS RSA SHA256 2020 CA1] ( https://crt.sh/?d=4385364571 ) | 0x06d8d904d5584346f68a2fa754227ec4<br >1C58A3A8518E8759BF075B76B750D4F2DF264FCD |
109
96
| └ [ GeoTrust Global TLS RSA4096 SHA256 2022 CA1] ( https://crt.sh/?d=6670931375 ) | 0x0f622f6f21c2ff5d521f723a1d47d62d<br >7E6DB7B7584D8CF2003E0931E6CFC41A3A62D3DF |
110
97
| [ ** DigiCert Global Root G2** ] ( https://cacerts.digicert.com/DigiCertGlobalRootG2.crt ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
111
- | └ [ Microsoft Azure TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.cer ) | 0x0aafa6c5ca63c45141ea3be1f7c75317<br >2F2877C5D778C31E0F29C7E371DF5471BD673173 |
112
- | └ [ Microsoft Azure TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.cer ) | 0x0c6ae97cced599838690a00a9ea53214<br >E7EEA674CA718E3BEFD90858E09F8372AD0AE2AA |
113
98
| └ [ Microsoft Azure RSA TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x05196526449a5e3d1a38748f5dcfebcc<br >F9388EA2C9B7D632B66A2B0B406DF1D37D3901F6 |
114
99
| └ [ Microsoft Azure RSA TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt ) | 0x09f96ec295555f24749eaf1e5dced49d<br >BE68D0ADAA2345B48E507320B695D386080E5B25 |
115
100
| └ [ Microsoft Azure RSA TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt ) | 0x0a43a9509b01352f899579ec7208ba50<br >3382517058A0C20228D598EE7501B61256A76442 |
116
101
| └ [ Microsoft Azure RSA TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0efb7e547edf0ff1069aee57696d7ba0<br >31600991ED5FEC63D355A5484A6DCC787EAD89BC |
117
- | └ [ Microsoft Azure TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.cer ) | 0x0d7bede97d8209967a52631b8bdd18bd<br >6C3AF02E7F269AA73AFD0EFF2A88A4A1F04ED1E5 |
118
- | └ [ Microsoft Azure TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.cer ) | 0x02e79171fb8021e93fe2d983834c50c0<br >30E01761AB97E59A06B41EF20AF6F2DE7EF4F7B0 |
119
102
| [ ** DigiCert Global Root G3** ] ( https://cacerts.digicert.com/DigiCertGlobalRootG3.crt ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
120
- | └ [ Microsoft Azure ECC TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2001.cer ) | 0x09dc42a5f574ff3a389ee06d5d4de440<br >92503D0D74A7D3708197B6EE13082D52117A6AB0 |
121
- | └ [ Microsoft Azure ECC TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2002.cer ) | 0x0e8dbe5ea610e6cbb569c736f6d7004b<br >1E981CCDDC69102A45C6693EE84389C3CF2329F1 |
122
103
| └ [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x01529ee8368f0b5d72ba433e2d8ea62d<br >56D955C849887874AA1767810366D90ADF6C8536 |
123
104
| └ [ Microsoft Azure ECC TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2004%20-%20xsign.crt ) | 0x02393d48d702425a7cb41c000b0ed7ca<br >FB73FDC24F06998E070A06B6AFC78FDF2A155B25 |
124
- | └ [ Microsoft Azure ECC TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2005.cer ) | 0x0ce59c30fd7a83532e2d0146b332f965<br >C6363570AF8303CDF31C1D5AD81E19DBFE172531 |
125
- | └ [ Microsoft Azure ECC TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2006.cer ) | 0x066e79cd7624c63130c77abeb6a8bb94<br >7365ADAEDFEA4909C1BAADBAB68719AD0C381163 |
126
105
| └ [ Microsoft Azure ECC TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2007%20-%20xsign.crt ) | 0x0f1f157582cdcd33734bdc5fcd941a33<br >3BE6CA5856E3B9709056DA51F32CBC8970A83E28 |
127
106
| └ [ Microsoft Azure ECC TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0ef2e5d83681520255e92c608fbc2ff4<br >716DF84638AC8E6EEBE64416C8DD38C2A25F6630 |
128
107
| [ ** Microsoft ECC Root Certificate Authority 2017** ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
129
- | └ [ Microsoft Azure ECC TLS Issuing CA 01] ( https://crt.sh/?d=2616305805 ) | 0x330000001aa9564f44321c54b900000000001a<br >CDA57423EC5E7192901CA1BF6169DBE48E8D1268 |
130
- | └ [ Microsoft Azure ECC TLS Issuing CA 02] ( https://crt.sh/?d=2616326233 ) | 0x330000001b498d6736ed5612c200000000001b<br >489FF5765030EB28342477693EB183A4DED4D2A6 |
131
108
| └ [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003322a2579b5e698bcc000000000033<br >91503BE7BF74E2A10AA078B48B71C3477175FEC3 |
132
109
| └ [ Microsoft Azure ECC TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2004.crt ) | 0x33000000322164aedab61f509d000000000032<br >406E3B38EFF35A727F276FE993590B70F8224AED |
133
- | └ [ Microsoft Azure ECC TLS Issuing CA 05] ( https://crt.sh/?d=2616326161 ) | 0x330000001cc0d2a3cd78cf2c1000000000001c<br >4C15BC8D7AA5089A84F2AC4750F040D064040CD4 |
134
- | └ [ Microsoft Azure ECC TLS Issuing CA 06] ( https://crt.sh/?d=2616326228 ) | 0x330000001d0913c309da3f05a600000000001d<br >DFEB65E575D03D0CC59FD60066C6D39421E65483 |
135
110
| └ [ Microsoft Azure ECC TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2007.crt ) | 0x3300000034c732435db22a0a2b000000000034<br >AB3490B7E37B3A8A1E715036522AB42652C3CFFE |
136
111
| └ [ Microsoft Azure ECC TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2008.crt ) | 0x3300000031526979844798bbb8000000000031<br >CF33D5A1C2F0355B207FCE940026E6C1580067FD |
137
112
| └ [ Microsoft ECC TLS Issuing AOC CA 01] ( https://crt.sh/?d=4789656467 ) | 33000000282bfd23e7d1add707000000000028<br >30ab5c33eb4b77d4cbff00a11ee0a7507d9dd316 |
@@ -143,10 +118,6 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
143
118
| └ [ Microsoft Azure RSA TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crt ) | 0x330000003cd7cb44ee579961d000000000003c<br >7304022CA8A9FF7E3E0C1242E0110E643822C45E |
144
119
| └ [ Microsoft Azure RSA TLS Issuing CA 07] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crt ) | 0x330000003bf980b0c83783431700000000003b<br >0E5F41B697DAADD808BF55AD080350A2A5DFCA93 |
145
120
| └ [ Microsoft Azure RSA TLS Issuing CA 08] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crt ) | 0x330000003a5dc2ffc321c16d9b00000000003a<br >512C8F3FB71EDACF7ADA490402E710B10C73026E |
146
- | └ [ Microsoft Azure TLS Issuing CA 01] ( https://crt.sh/?d=2616326024 ) | 0x1dbe9496f3db8b8de700000000001d<br >B9ED88EB05C15C79639493016200FDAB08137AF3 |
147
- | └ [ Microsoft Azure TLS Issuing CA 02] ( https://crt.sh/?d=2616326032 ) | 0x330000001ec6749f058517b4d000000000001e<br >C5FB956A0E7672E9857B402008E7CCAD031F9B08 |
148
- | └ [ Microsoft Azure TLS Issuing CA 05] ( https://crt.sh/?d=2616326057 ) | 0x330000001f9f1fa2043bc28db900000000001f<br >56F1CA470BB94E274B516A330494C792C419CF87 |
149
- | └ [ Microsoft Azure TLS Issuing CA 06] ( https://crt.sh/?d=2616330106 ) | 0x3300000020a2f1491a37fbd31f000000000020<br >8F1FD57F27C828D7BE29743B4D02CD7E6E5F43E6 |
150
121
| └ [ Microsoft RSA TLS Issuing AOC CA 01] ( https://crt.sh/?d=4789678141 ) | 330000002ffaf06f6697e2469c00000000002f<br >4697fdbed95739b457b347056f8f16a975baf8ee |
151
122
| └ [ Microsoft RSA TLS Issuing AOC CA 02] ( https://crt.sh/?d=4814787092 ) | 3300000030c756cc88f5c1e7eb000000000030<br >90ed2e9cb40d0cb49a20651033086b1ea2f76e0e |
152
123
| └ [ Microsoft RSA TLS Issuing EOC CA 01] ( https://crt.sh/?d=4814787098 ) | 33000000310c4914b18c8f339a000000000031<br >a04d3750debfccf1259d553dbec33162c6b42737 |
@@ -281,6 +252,27 @@ Microsoft updated Azure services to use TLS certificates from a different set of
281
252
282
253
### Article change log
283
254
255
+ - June 27, 2024: Removed the following CAs, which were superseded by both versions of Microsoft Azure ECC TLS Issuing CAs 03, 04, 07, 08.
256
+
257
+ | Certificate Authority | Serial Number<br>Thumbprint |
258
+ |---- |---- |
259
+ | [Microsoft Azure ECC TLS Issuing CA 01](https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2001.cer)|0x09dc42a5f574ff3a389ee06d5d4de440<br>92503D0D74A7D3708197B6EE13082D52117A6AB0|
260
+ |[Microsoft Azure ECC TLS Issuing CA 01](https://crt.sh/?d=2616305805)|0x330000001aa9564f44321c54b900000000001a<br>CDA57423EC5E7192901CA1BF6169DBE48E8D1268|
261
+ |[Microsoft Azure ECC TLS Issuing CA 02](https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2002.cer)|0x0e8dbe5ea610e6cbb569c736f6d7004b<br>1E981CCDDC69102A45C6693EE84389C3CF2329F1|
262
+ |[Microsoft Azure ECC TLS Issuing CA 02](https://crt.sh/?d=2616326233)|0x330000001b498d6736ed5612c200000000001b<br>489FF5765030EB28342477693EB183A4DED4D2A6|
263
+ |[Microsoft Azure ECC TLS Issuing CA 05](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2005.cer)|x0ce59c30fd7a83532e2d0146b332f965<br>C6363570AF8303CDF31C1D5AD81E19DBFE172531|
264
+ |[Microsoft Azure ECC TLS Issuing CA 05](https://crt.sh/?d=2616326161)| 0x330000001cc0d2a3cd78cf2c1000000000001c<br>4C15BC8D7AA5089A84F2AC4750F040D064040CD4|
265
+ |[Microsoft Azure ECC TLS Issuing CA 06](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2006.cer)|0x066e79cd7624c63130c77abeb6a8bb94<br>7365ADAEDFEA4909C1BAADBAB68719AD0C381163|
266
+ |[Microsoft Azure ECC TLS Issuing CA 06](https://crt.sh/?d=2616326228)|0x330000001d0913c309da3f05a600000000001d<br>DFEB65E575D03D0CC59FD60066C6D39421E65483|
267
+ |[Microsoft Azure TLS Issuing CA 01](https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.cer)| 0x0aafa6c5ca63c45141ea3be1f7c75317<br>2F2877C5D778C31E0F29C7E371DF5471BD673173|
268
+ |[Microsoft Azure TLS Issuing CA 01](https://crt.sh/?d=2616326024)| 0x1dbe9496f3db8b8de700000000001d<br>B9ED88EB05C15C79639493016200FDAB08137AF3|
269
+ |[Microsoft Azure TLS Issuing CA 02](https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.cer)| 0x0c6ae97cced599838690a00a9ea53214<br>E7EEA674CA718E3BEFD90858E09F8372AD0AE2AA|
270
+ |[Microsoft Azure TLS Issuing CA 02](https://crt.sh/?d=2616326032)| 0x330000001ec6749f058517b4d000000000001e<br>C5FB956A0E7672E9857B402008E7CCAD031F9B08|
271
+ |[Microsoft Azure TLS Issuing CA 05](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.cer)| 0x0d7bede97d8209967a52631b8bdd18bd<br>6C3AF02E7F269AA73AFD0EFF2A88A4A1F04ED1E5|
272
+ |[Microsoft Azure TLS Issuing CA 05](https://crt.sh/?d=2616326057)|0x330000001f9f1fa2043bc28db900000000001f<br>56F1CA470BB94E274B516A330494C792C419CF87|
273
+ |[Microsoft Azure TLS Issuing CA 06](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.cer)| 0x02e79171fb8021e93fe2d983834c50c0<br>30E01761AB97E59A06B41EF20AF6F2DE7EF4F7B0|
274
+ |[Microsoft Azure TLS Issuing CA 06](https://crt.sh/?d=2616330106)|0x3300000020a2f1491a37fbd31f000000000020<br>8F1FD57F27C828D7BE29743B4D02CD7E6E5F43E6|
275
+
284
276
- July 17, 2023: Added 16 new subordinate Certificate Authorities
285
277
- February 7, 2023: Added eight new subordinate Certificate Authorities
286
278
0 commit comments