@@ -6,7 +6,7 @@ ms.service: security
6
6
ms.subservice : security-fundamentals
7
7
ms.custom : devx-track-extended-java
8
8
ms.topic : conceptual
9
- ms.date : 07/17 /2023
9
+ ms.date : 11/27 /2023
10
10
ms.author : sarahlipsey
11
11
author : shlipsey3
12
12
manager : amycolannino
@@ -36,7 +36,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
36
36
| [ DigiCert Global Root G2] ( https://cacerts.digicert.com/DigiCertGlobalRootG2.crt ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
37
37
| [ DigiCert Global Root G3] ( https://cacerts.digicert.com/DigiCertGlobalRootG3.crt ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
38
38
| [ Microsoft ECC Root Certificate Authority 2017] ( https://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
39
- | [ Microsoft RSA Root Certificate Authority 2017] ( https://www.microsoft.com/pkiops/certs/archived/ Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt ) | 29c87039f4dbfdb94dbcda6ca792836b <br >ee68c3e94ab5d55eb9395116424e25b0cadd9009 |
39
+ | [ Microsoft RSA Root Certificate Authority 2017] ( https://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt ) | 0x1ed397095fd8b4b347701eaabe7f45b3 <br >73a5e64a3bff8316ff0edccc618a906e4eae4d74 |
40
40
41
41
### Subordinate Certificate Authorities
42
42
@@ -98,18 +98,18 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
98
98
99
99
| Certificate Authority | Serial Number<br >Thumbprint |
100
100
| ---- | ---- |
101
- | [ ** Baltimore CyberTrust Root** ] ( https://crt.sh/?d=76 ) | 020000b9<br >d4de20d05e66fc53fe1a50882c78db2852cae474 |
101
+ | [ ** Baltimore CyberTrust Root** ] ( https://cacerts.digicert.com/BaltimoreCyberTrustRoot.crt ) | 020000b9<br >d4de20d05e66fc53fe1a50882c78db2852cae474 |
102
102
| └ [ Microsoft RSA TLS CA 01] ( https://crt.sh/?d=3124375355 ) | 0x0f14965f202069994fd5c7ac788941e2<br >703D7A8F0EBF55AAA59F98EAF4A206004EB2516A |
103
103
| └ [ Microsoft RSA TLS CA 02] ( https://crt.sh/?d=3124375356 ) | 0x0fa74722c53d88c80f589efb1f9d4a3a<br >B0C2D2D13CDD56CDAA6AB6E2C04440BE4A429C75 |
104
- | [ ** DigiCert Global Root CA** ] ( https://crt.sh/?d=853428 ) | 0x083be056904246b1a1756ac95991c74a<br >A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 |
104
+ | [ ** DigiCert Global Root CA** ] ( https://cacerts.digicert.com/DigiCertGlobalRootCA.crt ) | 0x083be056904246b1a1756ac95991c74a<br >A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 |
105
105
| └ [ DigiCert Basic RSA CN CA G2] ( https://crt.sh/?d=2545289014 ) | 0x02f7e1f982bad009aff47dc95741b2f6<br >4D1FA5D1FB1AC3917C08E43F65015E6AEA571179 |
106
106
| └ [ DigiCert Cloud Services CA-1] ( https://crt.sh/?d=12624881 ) | 0x019ec1c6bd3f597bb20c3338e551d877<br >81B68D6CD2F221F8F534E677523BB236BBA1DC56 |
107
107
| └ [ DigiCert SHA2 Secure Server CA] ( https://crt.sh/?d=3422153451 ) | 0x02742eaa17ca8e21c717bb1ffcfd0ca0<br >626D44E704D1CEABE3BF0D53397464AC8080142C |
108
108
| └ [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( https://crt.sh/?d=3422153452 ) | 0x0a275fe704d6eecb23d5cd5b4b1a4e04<br >51E39A8BDB08878C52D6186588A0FA266A69CF28 |
109
109
| └ [ DigiCert TLS RSA SHA256 2020 CA1] ( https://crt.sh/?d=4385364571 ) | 0x06d8d904d5584346f68a2fa754227ec4<br >1C58A3A8518E8759BF075B76B750D4F2DF264FCD |
110
110
| └ [ GeoTrust Global TLS RSA4096 SHA256 2022 CA1] ( https://crt.sh/?d=6670931375 ) | 0x0f622f6f21c2ff5d521f723a1d47d62d<br >7E6DB7B7584D8CF2003E0931E6CFC41A3A62D3DF |
111
111
| └ [ GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1] ( https://crt.sh/?d=3112858728 ) | 0x0c08966535b942a9735265e4f97540bc<br >2F7AA2D86056A8775796F798C481A079E538E004 |
112
- | [ ** DigiCert Global Root G2** ] ( https://crt.sh/?d=8656329 ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
112
+ | [ ** DigiCert Global Root G2** ] ( https://cacerts.digicert.com/DigiCertGlobalRootG2.crt ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
113
113
| └ [ Microsoft Azure TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.cer ) | 0x0aafa6c5ca63c45141ea3be1f7c75317<br >2F2877C5D778C31E0F29C7E371DF5471BD673173 |
114
114
| └ [ Microsoft Azure TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.cer ) | 0x0c6ae97cced599838690a00a9ea53214<br >E7EEA674CA718E3BEFD90858E09F8372AD0AE2AA |
115
115
| └ [ * Microsoft Azure RSA TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x05196526449a5e3d1a38748f5dcfebcc<br >F9388EA2C9B7D632B66A2B0B406DF1D37D3901F6 |
@@ -118,7 +118,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
118
118
| └ [ * Microsoft Azure RSA TLS Issuing CA 08* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0efb7e547edf0ff1069aee57696d7ba0<br >31600991ED5FEC63D355A5484A6DCC787EAD89BC |
119
119
| └ [ Microsoft Azure TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.cer ) | 0x0d7bede97d8209967a52631b8bdd18bd<br >6C3AF02E7F269AA73AFD0EFF2A88A4A1F04ED1E5 |
120
120
| └ [ Microsoft Azure TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.cer ) | 0x02e79171fb8021e93fe2d983834c50c0<br >30E01761AB97E59A06B41EF20AF6F2DE7EF4F7B0 |
121
- | [ ** DigiCert Global Root G3** ] ( https://crt.sh/?d=8568700 ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
121
+ | [ ** DigiCert Global Root G3** ] ( https://cacerts.digicert.com/DigiCertGlobalRootG3.crt ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
122
122
| └ [ Microsoft Azure ECC TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2001.cer ) | 0x09dc42a5f574ff3a389ee06d5d4de440<br >92503D0D74A7D3708197B6EE13082D52117A6AB0 |
123
123
| └ [ Microsoft Azure ECC TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2002.cer ) | 0x0e8dbe5ea610e6cbb569c736f6d7004b<br >1E981CCDDC69102A45C6693EE84389C3CF2329F1 |
124
124
| └ [ * Microsoft Azure ECC TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x01529ee8368f0b5d72ba433e2d8ea62d<br >56D955C849887874AA1767810366D90ADF6C8536 |
@@ -127,7 +127,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
127
127
| └ [ * Microsoft Azure ECC TLS Issuing CA 08* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0ef2e5d83681520255e92c608fbc2ff4<br >716DF84638AC8E6EEBE64416C8DD38C2A25F6630 |
128
128
| └ [ Microsoft Azure ECC TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2005.cer ) | 0x0ce59c30fd7a83532e2d0146b332f965<br >C6363570AF8303CDF31C1D5AD81E19DBFE172531 |
129
129
| └ [ Microsoft Azure ECC TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2006.cer ) | 0x066e79cd7624c63130c77abeb6a8bb94<br >7365ADAEDFEA4909C1BAADBAB68719AD0C381163 |
130
- | [ ** Microsoft ECC Root Certificate Authority 2017** ] ( https://crt.sh/?d=2565145421 ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
130
+ | [ ** Microsoft ECC Root Certificate Authority 2017** ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
131
131
| └ [ Microsoft Azure ECC TLS Issuing CA 01] ( https://crt.sh/?d=2616305805 ) | 0x330000001aa9564f44321c54b900000000001a<br >CDA57423EC5E7192901CA1BF6169DBE48E8D1268 |
132
132
| └ [ Microsoft Azure ECC TLS Issuing CA 02] ( https://crt.sh/?d=2616326233 ) | 0x330000001b498d6736ed5612c200000000001b<br >489FF5765030EB28342477693EB183A4DED4D2A6 |
133
133
| └ [ * Microsoft Azure ECC TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003322a2579b5e698bcc000000000033<br >91503BE7BF74E2A10AA078B48B71C3477175FEC3 |
@@ -140,7 +140,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
140
140
| └ [ Microsoft ECC TLS Issuing AOC CA 02] ( https://crt.sh/?d=4814787086 ) | 33000000290f8a6222ef6a5695000000000029<br >3709cd92105d074349d00ea8327f7d5303d729c8 |
141
141
| └ [ Microsoft ECC TLS Issuing EOC CA 01] ( https://crt.sh/?d=4814787088 ) | 330000002a2d006485fdacbfeb00000000002a<br >5fa13b879b2ad1b12e69d476e6cad90d01013b46 |
142
142
| └ [ Microsoft ECC TLS Issuing EOC CA 02] ( https://crt.sh/?d=4814787085 ) | 330000002be6902838672b667900000000002b<br >58a1d8b1056571d32be6a7c77ed27f73081d6e7a |
143
- | [ ** Microsoft RSA Root Certificate Authority 2017** ] ( https://crt.sh/?id=2565151295 ) | 0x1ed397095fd8b4b347701eaabe7f45b3<br >73A5E64A3BFF8316FF0EDCCC618A906E4EAE4D74 |
143
+ | [ ** Microsoft RSA Root Certificate Authority 2017** ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt ) | 0x1ed397095fd8b4b347701eaabe7f45b3<br >73A5E64A3BFF8316FF0EDCCC618A906E4EAE4D74 |
144
144
| └ [ * Microsoft Azure RSA TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003968ea517d8a7e30ce000000000039<br >37461AACFA5970F7F2D2BAC5A659B53B72541C68 |
145
145
| └ [ * Microsoft Azure RSA TLS Issuing CA 04* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crt ) | 0x330000003cd7cb44ee579961d000000000003c<br >7304022CA8A9FF7E3E0C1242E0110E643822C45E |
146
146
| └ [ * Microsoft Azure RSA TLS Issuing CA 07* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crt ) | 0x330000003bf980b0c83783431700000000003b<br >0E5F41B697DAADD808BF55AD080350A2A5DFCA93 |
0 commit comments