Certificates and CRLs

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Public TLS CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft TLS RSA Root G2

Thumbprint (sha1) :
21734d95a2473be25cbfd12a84c6fbc5bc8e2414

crt

crl

Microsoft TLS ECC Root G2

Thumbprint (sha1) :
f82bb951ba6b8a85adfa7515028560d1250e7237

crt

crl

Microsoft ECC Root Certificate Authority 2017

Thumbprint (sha1) :
999a64c37ff47d9fab95f14769891460eec4c3c5

crl

Microsoft RSA Root Certificate Authority 2017

Thumbprint (sha1) :
73a5e64a3bff8316ff0edccc618a906e4eae4d74
crt active expired revoked

crl

Microsoft EV ECC Root Certificate Authority 2017

Thumbprint (sha1) :
6b1937abfd64e1e40daf2262a27857c015d6228d
crt

crl

Microsoft EV RSA Root Certificate Authority 2017

Thumbprint (sha1) :
ada06e72393ccbe873648cf122a91c35ef4c984d
crt

crl

Microsoft Azure ECC TLS Issuing CA 03

Thumbprint (sha1) :
91503BE7BF74E2A10AA078B48B71C3477175FEC3
crt

crl

Microsoft Azure ECC TLS Issuing CA 04

Thumbprint (sha1) :
406E3B38EFF35A727F276FE993590B70F8224AED
crt

crl

Microsoft Azure ECC TLS Issuing CA 07

Thumbprint (sha1) :
AB3490B7E37B3A8A1E715036522AB42652C3CFFE
crt

crl

Microsoft Azure ECC TLS Issuing CA 08

Thumbprint (sha1) :
CF33D5A1C2F0355B207FCE940026E6C1580067FD
crt

crl

Microsoft Azure RSA TLS Issuing CA 03

Thumbprint (sha1) :
37461AACFA5970F7F2D2BAC5A659B53B72541C68
crt

crl

Microsoft Azure RSA TLS Issuing CA 04

Thumbprint (sha1) :
7304022CA8A9FF7E3E0C1242E0110E643822C45E
crt

crl

Microsoft Azure RSA TLS Issuing CA 07

Thumbprint (sha1) :
0E5F41B697DAADD808BF55AD080350A2A5DFCA93
crt

crl

Microsoft Azure RSA TLS Issuing CA 08

Thumbprint (sha1) :
512C8F3FB71EDACF7ADA490402E710B10C73026E
crt

crl

Microsoft ECC TLS Issuing AOC CA 01

Thumbprint (sha1) :
30ab5c33eb4b77d4cbff00a11ee0a7507d9dd316
crt

crl

Microsoft ECC TLS Issuing AOC CA 02

Thumbprint (sha1) :
3709cd92105d074349d00ea8327f7d5303d729c8
crt

crl

Microsoft ECC TLS Issuing EOC CA 01

Thumbprint (sha1) :
5fa13b879b2ad1b12e69d476e6cad90d01013b46
crt

crl

Microsoft ECC TLS Issuing EOC CA 02

Thumbprint (sha1) :
58a1d8b1056571d32be6a7c77ed27f73081d6e7a
crt

crl

Microsoft RSA TLS Issuing AOC CA 01

Thumbprint (sha1) :
4697fdbed95739b457b347056f8f16a975baf8ee
crt

crl

Microsoft RSA TLS Issuing AOC CA 02

Thumbprint (sha1) :
90ed2e9cb40d0cb49a20651033086b1ea2f76e0e
crt

crl

Microsoft RSA TLS Issuing EOC CA 01

Thumbprint (sha1) :
a04d3750debfccf1259d553dbec33162c6b42737
crt

crl

Microsoft RSA TLS Issuing EOC CA 02

Thumbprint (sha1) :
697c6404399cc4e7bb3c0d4a8328b71dd3205563
crt

crl

Microsoft TLS G2 RSA CA OCSP 02

Thumbprint (sha1) :
f8a408b8fbeea077b75738658641be77154720eb
crt

crl

Microsoft TLS G2 RSA CA OCSP 04

Thumbprint (sha1) :
da6d0400641b45aecc595d24e5037aa6bc09c358
crt

crl

Microsoft TLS G2 RSA CA OCSP 06

Thumbprint (sha1) :
88283c78d08489718f78cd2b797333765164e911
crt

crl

Microsoft TLS G2 RSA CA OCSP 08

Thumbprint (sha1) :
ddbd3da5c09386cc36cfec4680f17084ba7a5628
crt

crl

Microsoft TLS G2 RSA CA OCSP 10

Thumbprint (sha1) :
b663d8413ca35f3f22643ccbc2d3250700916b1a
crt

crl

Microsoft TLS G2 RSA CA OCSP 12

Thumbprint (sha1) :
d3089df9f47490887045b91d3fdef6ed87f02f52
crt

crl

Microsoft TLS G2 RSA CA OCSP 14

Thumbprint (sha1) :
55d9b33bdc16ddb3b663f1771f96d4324c118073
crt

crl

Microsoft TLS G2 RSA CA OCSP 16

Thumbprint (sha1) :
27e6663299d340dfe54571ceccec01be74495dc6
crt

crl

Microsoft TLS G2 ECC CA OCSP 02

Thumbprint (sha1) :
336d3e5451315294f6e1e7cfda84e51c8b1e4054
crt

crl

Microsoft TLS G2 ECC CA OCSP 04

Thumbprint (sha1) :
5bff3cc51fb9c1cce0d52f754427347545e583c5
crt

crl

Microsoft TLS G2 ECC CA OCSP 06

Thumbprint (sha1) :
9bc57546acbdb29e388cd1791b43de4f659b844b
crt

crl

Microsoft TLS G2 ECC CA OCSP 08

Thumbprint (sha1) :
f1c0a1828c10b43f9c651fdfc494832174be8d07
crt

crl

The following CAs are no longer issuing as of December 18, 2019

Microsoft ECC Root Certificate Authority 2017

Thumbprint (sha1) :
7CA9013D43721551E987380B3EAE4B442DC037EA

crt

crl

Microsoft RSA Root Certificate Authority 2017

Thumbprint (sha1) :
EE68C3E94AB5D55EB9395116424E25B0CADD9009
crt

crl

Microsoft EV ECC Root Certificate Authority 2017

Thumbprint (sha1) :
B8095F5A89FB47A7017ED794DD4F611E27830E27
crt

crl

Microsoft EV RSA Root Certificate Authority 2017

Thumbprint (sha1) :
3AD38A39CE4E88DCDF46995E969FC339D0799858
crt

crl

 

The following certificates have been crossed signed by DigiCert Global Root G2 (RSA):

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Azure RSA TLS Issuing CA 03

Thumbprint (sha1) :
f9388ea2c9b7d632b66a2b0b406df1d37d3901f6
crt

crl

Microsoft Azure RSA TLS Issuing CA 04

Thumbprint (sha1) :
be68d0adaa2345b48e507320b695d386080e5b25
crt

crl

Microsoft Azure RSA TLS Issuing CA 07

Thumbprint (sha1) :
3382517058a0c20228d598ee7501b61256a76442
crt

crl

Microsoft Azure RSA TLS Issuing CA 08

Thumbprint (sha1) :
31600991ed5fec63d355a5484a6dcc787ead89bc
crt

crl

Microsoft TLS RSA Root G2

Thumbprint (sha1) :
b5ee89e77326ab2bf1775bd99c19a28947ff8184
crt

crl

Microsoft TLS G2 RSA CA OCSP 02

Thumbprint (sha1) :
f8a408b8fbeea077b75738658641be77154720eb
crt

crl

Microsoft TLS G2 RSA CA OCSP 04

Thumbprint (sha1) :
da6d0400641b45aecc595d24e5037aa6bc09c358
crt

crl

Microsoft TLS G2 RSA CA OCSP 06

Thumbprint (sha1) :
88283c78d08489718f78cd2b797333765164e911
crt

crl

Microsoft TLS G2 RSA CA OCSP 08

Thumbprint (sha1) :
ddbd3da5c09386cc36cfec4680f17084ba7a5628
crt

crl

Microsoft TLS G2 RSA CA OCSP 10

Thumbprint (sha1) :
b663d8413ca35f3f22643ccbc2d3250700916b1a
crt

crl

Microsoft TLS G2 RSA CA OCSP 12

Thumbprint (sha1) :
d3089df9f47490887045b91d3fdef6ed87f02f52
crt

crl

Microsoft TLS G2 RSA CA OCSP 14

Thumbprint (sha1) :
55d9b33bdc16ddb3b663f1771f96d4324c118073
crt

crl

Microsoft TLS G2 RSA CA OCSP 16

Thumbprint (sha1) :
27e6663299d340dfe54571ceccec01be74495dc6
crt

crl

 

The following certificates have been crossed signed by DigiCert Global Root G3 (ECC):

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Azure ECC TLS Issuing CA 03

Thumbprint (sha1) :
56d955c849887874aa1767810366d90adf6c8536
crt

crl

Microsoft Azure ECC TLS Issuing CA 04

Thumbprint (sha1) :
fb73fdc24f06998e070a06b6afc78fdf2a155b25
crt

crl

Microsoft Azure ECC TLS Issuing CA 07

Thumbprint (sha1) :
3be6ca5856e3b9709056da51f32cbc8970a83e28
crt

crl

Microsoft Azure ECC TLS Issuing CA 08

Thumbprint (sha1) :
716df84638ac8e6eebe64416c8dd38c2a25f6630
crt

crl

Microsoft TLS ECC Root G2

Thumbprint (sha1) :
7fa05acf9b4aabb0de0cfafa297ddf92fdc5f3f5
crt

crl

Microsoft TLS G2 ECC CA OCSP 02

Thumbprint (sha1) :
336d3e5451315294f6e1e7cfda84e51c8b1e4054
crt

crl

Microsoft TLS G2 ECC CA OCSP 04

Thumbprint (sha1) :
5bff3cc51fb9c1cce0d52f754427347545e583c5
crt

crl

Microsoft TLS G2 ECC CA OCSP 06

Thumbprint (sha1) :
9bc57546acbdb29e388cd1791b43de4f659b844b
crt

crl

Microsoft TLS G2 ECC CA OCSP 08

Thumbprint (sha1) :
f1c0a1828c10b43f9c651fdfc494832174be8d07
crt

crl

 

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Third Party CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Identity Verification Root Certificate Authority 2020

Thumbprint (sha1) :
f40042e2e5f7e8ef8189fed15519aece42c3bfa2
crt

crl

Microsoft Public RSA Timestamping CA 2020

Thumbprint (sha1) :
27f0abac2877ba255f62b389b43ff539a0fb598e
crt

crl

 

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Corporate CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Root Certificate Authority 2010

Thumbprint (sha1) :
3B1EFD3A66EA28B16697394703A72CA340A05BD5
crt

crl

Microsoft Root Certificate Authority 2011

Thumbprint (sha1) :
8F43288AD272F3103B6FB1428485EA3014C0BCFE
crt

crl

Microsoft Time Stamp Root Certificate Authority 2014

Thumbprint (sha1) :
0119E81BE9A14CD8E22F40AC118C687ECBA3F4D8
crt

crl

Microsoft ECC Product Root Certificate Authority 2018

Thumbprint (sha1) :
06F1AA330B927B753A40E68CDF22E34BCBEF3352
crt

crl

Microsoft ECC TS Root Certificate Authority 2018

Thumbprint (sha1) :
31F9FC8BA3805986B721EA7295C65B3A44534274
crt

crl






Report Incident

 

Email Incident

centralpki@microsoft.com






Policy


Microsoft PKI Services Certificate Policy (CP)

Microsoft PKI Services CP v3.1.9

Microsoft PKI Services CP v3.1.8

Microsoft PKI Services CP v3.1.7

Microsoft PKI Services CP v3.1.6

Microsoft PKI Services CP v3.1.5

Microsoft PKI Services CP v3.1.4

Microsoft PKI Services CP v3.1.3

Microsoft PKI Services CP v3.1.2

Microsoft PKI Services CP v3.1.1

Microsoft PKI Services CP v3.1


Microsoft PKI Services Public TLS Certification Practice Statement (CPS)

Microsoft PKI Services Public TLS CPS v3.3.4

Microsoft PKI Services Public TLS CPS v3.3.3

Microsoft PKI Services Public TLS CPS v3.3.2

Microsoft PKI Services Public TLS CPS v3.3.1

Microsoft PKI Services Public TLS CPS v3.3.0

Microsoft PKI Services CPS v3.2.4

Microsoft PKI Services CPS v3.2.3

Microsoft PKI Services CPS v3.2.2

Microsoft PKI Services CPS v3.2.1

Microsoft PKI Services CPS v3.2.0

Microsoft PKI Services CPS v3.1.9

Microsoft PKI Services CPS v3.1.8

Microsoft PKI Services CPS v3.1.7

Microsoft PKI Services CPS v3.1.6

Microsoft PKI Services CPS v3.1.5

Microsoft PKI Services CPS v3.1.4

Microsoft PKI Services CPS v3.1.3

Microsoft PKI Services CPS v3.1.2

Microsoft PKI Services CPS v3.1.1

Microsoft PKI Services CPS v3.1


Microsoft PKI Services Third Party Certification Practice Statement (CPS)

Microsoft PKI Services Third Party CPS v1.0.5

Microsoft PKI Services Third Party CPS v1.0.4

Microsoft PKI Services Third Party CPS v1.0.3

Microsoft PKI Services Third Party CPS v1.0.2


Microsoft PKI Services Corporate Certification Practice Statement (CPS)

Microsoft PKI Services Corporate CPS v3.1.9

Microsoft PKI Services Corporate CPS v3.1.8

Microsoft PKI Services Corporate CPS v3.1.7


Microsoft PKI Services Subscriber Agreement

Microsoft PKI Services Subscriber Agreement


Microsoft PKI Services Relying Party Agreement

Microsoft PKI Services Relying Party Agreement


Privacy Policy

Microsoft Privacy Policy






Audit

WebTrust Audits - MS PKI Services Audit Period runs from May 1 to April 30 each year

2025 Audits

Audit Stream Description Latest WebTrust Seal Latest Audit Letters Applicable CPS (see Policy Section above for latest version)
WTCA Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11750 Microsoft PKI WTCA Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Public TLS Certification Practices Statement (CPS)
Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11750 Microsoft PKI ACS WTCA Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Microsoft Trusted Root Store Only https://www.cpacanada.ca/webtrustseal?sealid=11750 Microsoft TRP WTCA Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Corporate Certification Practice Statement (CPS)
Microsoft Internal Hierarchies n/a Microsoft Internal Only WTCA Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Corporate Certification Practice Statement (CPS)
WTNS Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11753 Microsoft PKI WTNS Independent Accountant's Opinion Report and Management Assertion July 2025.pdf Microsoft PKI Services Public TLS Certification Practices Statement (CPS)
Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11753 Microsoft PKI ACS WTNS Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Microsoft Trusted Root Store Only https://www.cpacanada.ca/webtrustseal?sealid=11753 Microsoft TRP WTNS Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Corporate Certification Practice Statement (CPS)
Microsoft Internal Hierarchies n/a Microsoft Internal Only WTNS Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Corporate Certification Practice Statement (CPS)
WTBR SSL Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11751 Microsoft PKI WTBR SSL Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Public TLS Certification Practices Statement (CPS)
WTBR CS Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11752 Microsoft PKI ACS WTBR CS Independent Accountant's Opinion Report and Management Assertion July 2025 Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Auditor Qualifications July 2025 Microsoft PKI Services - Auditor Qualification Letter July 2025