Certificates and CRLs

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Public TLS CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft TLS RSA Root G2

Thumbprint (sha1) :
21734d95a2473be25cbfd12a84c6fbc5bc8e2414

crt

crl

Microsoft TLS ECC Root G2

Thumbprint (sha1) :
f82bb951ba6b8a85adfa7515028560d1250e7237

crt

crl

Microsoft ECC Root Certificate Authority 2017

Thumbprint (sha1) :
999a64c37ff47d9fab95f14769891460eec4c3c5

crl

Microsoft RSA Root Certificate Authority 2017

Thumbprint (sha1) :
73a5e64a3bff8316ff0edccc618a906e4eae4d74
crt active expired revoked

crl

Microsoft EV ECC Root Certificate Authority 2017

Thumbprint (sha1) :
6b1937abfd64e1e40daf2262a27857c015d6228d
crt

crl

Microsoft EV RSA Root Certificate Authority 2017

Thumbprint (sha1) :
ada06e72393ccbe873648cf122a91c35ef4c984d
crt

crl

Microsoft Azure ECC TLS Issuing CA 03

Thumbprint (sha1) :
91503BE7BF74E2A10AA078B48B71C3477175FEC3
crt

crl

Microsoft Azure ECC TLS Issuing CA 04

Thumbprint (sha1) :
406E3B38EFF35A727F276FE993590B70F8224AED
crt

crl

Microsoft Azure ECC TLS Issuing CA 07

Thumbprint (sha1) :
AB3490B7E37B3A8A1E715036522AB42652C3CFFE
crt

crl

Microsoft Azure ECC TLS Issuing CA 08

Thumbprint (sha1) :
CF33D5A1C2F0355B207FCE940026E6C1580067FD
crt

crl

Microsoft Azure RSA TLS Issuing CA 03

Thumbprint (sha1) :
37461AACFA5970F7F2D2BAC5A659B53B72541C68
crt

crl

Microsoft Azure RSA TLS Issuing CA 04

Thumbprint (sha1) :
7304022CA8A9FF7E3E0C1242E0110E643822C45E
crt

crl

Microsoft Azure RSA TLS Issuing CA 07

Thumbprint (sha1) :
0E5F41B697DAADD808BF55AD080350A2A5DFCA93
crt

crl

Microsoft Azure RSA TLS Issuing CA 08

Thumbprint (sha1) :
512C8F3FB71EDACF7ADA490402E710B10C73026E
crt

crl

Microsoft ECC TLS Issuing AOC CA 01

Thumbprint (sha1) :
30ab5c33eb4b77d4cbff00a11ee0a7507d9dd316
crt

crl

Microsoft ECC TLS Issuing AOC CA 02

Thumbprint (sha1) :
3709cd92105d074349d00ea8327f7d5303d729c8
crt

crl

Microsoft ECC TLS Issuing EOC CA 01

Thumbprint (sha1) :
5fa13b879b2ad1b12e69d476e6cad90d01013b46
crt

crl

Microsoft ECC TLS Issuing EOC CA 02

Thumbprint (sha1) :
58a1d8b1056571d32be6a7c77ed27f73081d6e7a
crt

crl

Microsoft RSA TLS Issuing AOC CA 01

Thumbprint (sha1) :
4697fdbed95739b457b347056f8f16a975baf8ee
crt

crl

Microsoft RSA TLS Issuing AOC CA 02

Thumbprint (sha1) :
90ed2e9cb40d0cb49a20651033086b1ea2f76e0e
crt

crl

Microsoft RSA TLS Issuing EOC CA 01

Thumbprint (sha1) :
a04d3750debfccf1259d553dbec33162c6b42737
crt

crl

Microsoft RSA TLS Issuing EOC CA 02

Thumbprint (sha1) :
697c6404399cc4e7bb3c0d4a8328b71dd3205563
crt

crl

The following CAs are no longer issuing as of December 18, 2019

Microsoft ECC Root Certificate Authority 2017

Thumbprint (sha1) :
7CA9013D43721551E987380B3EAE4B442DC037EA

crt

crl

Microsoft RSA Root Certificate Authority 2017

Thumbprint (sha1) :
EE68C3E94AB5D55EB9395116424E25B0CADD9009
crt

crl

Microsoft EV ECC Root Certificate Authority 2017

Thumbprint (sha1) :
B8095F5A89FB47A7017ED794DD4F611E27830E27
crt

crl

Microsoft EV RSA Root Certificate Authority 2017

Thumbprint (sha1) :
3AD38A39CE4E88DCDF46995E969FC339D0799858
crt

crl

 

The following certificates have been crossed signed by DigiCert Global Root G2 (RSA):

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Azure RSA TLS Issuing CA 03

Thumbprint (sha1) :
f9388ea2c9b7d632b66a2b0b406df1d37d3901f6
crt

crl

Microsoft Azure RSA TLS Issuing CA 04

Thumbprint (sha1) :
be68d0adaa2345b48e507320b695d386080e5b25
crt

crl

Microsoft Azure RSA TLS Issuing CA 07

Thumbprint (sha1) :
3382517058a0c20228d598ee7501b61256a76442
crt

crl

Microsoft Azure RSA TLS Issuing CA 08

Thumbprint (sha1) :
31600991ed5fec63d355a5484a6dcc787ead89bc
crt

crl

 

The following certificates have been crossed signed by DigiCert Global Root G3 (ECC):

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Azure ECC TLS Issuing CA 03

Thumbprint (sha1) :
56d955c849887874aa1767810366d90adf6c8536
crt

crl

Microsoft Azure ECC TLS Issuing CA 04

Thumbprint (sha1) :
fb73fdc24f06998e070a06b6afc78fdf2a155b25
crt

crl

Microsoft Azure ECC TLS Issuing CA 07

Thumbprint (sha1) :
3be6ca5856e3b9709056da51f32cbc8970a83e28
crt

crl

Microsoft Azure ECC TLS Issuing CA 08

Thumbprint (sha1) :
716df84638ac8e6eebe64416c8dd38c2a25f6630
crt

crl

 

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Third Party CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Identity Verification Root Certificate Authority 2020

Thumbprint (sha1) :
f40042e2e5f7e8ef8189fed15519aece42c3bfa2
crt

crl

Microsoft Public RSA Timestamping CA 2020

Thumbprint (sha1) :
27f0abac2877ba255f62b389b43ff539a0fb598e
crt

crl

 

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Corporate CPS on this page.

Certificate Authority

Certificate

Certificate Revocation List

Microsoft Root Certificate Authority 2010

Thumbprint (sha1) :
3B1EFD3A66EA28B16697394703A72CA340A05BD5
crt

crl

Microsoft Root Certificate Authority 2011

Thumbprint (sha1) :
8F43288AD272F3103B6FB1428485EA3014C0BCFE
crt

crl

Microsoft Time Stamp Root Certificate Authority 2014

Thumbprint (sha1) :
0119E81BE9A14CD8E22F40AC118C687ECBA3F4D8
crt

crl

Microsoft ECC Product Root Certificate Authority 2018

Thumbprint (sha1) :
06F1AA330B927B753A40E68CDF22E34BCBEF3352
crt

crl

Microsoft ECC TS Root Certificate Authority 2018

Thumbprint (sha1) :
31F9FC8BA3805986B721EA7295C65B3A44534274
crt

crl






Report Incident

 

Email Incident

centralpki@microsoft.com






Policy


Microsoft PKI Services Certificate Policy (CP)

Microsoft PKI Services CP v3.1.9

Microsoft PKI Services CP v3.1.8

Microsoft PKI Services CP v3.1.7

Microsoft PKI Services CP v3.1.6

Microsoft PKI Services CP v3.1.5

Microsoft PKI Services CP v3.1.4

Microsoft PKI Services CP v3.1.3

Microsoft PKI Services CP v3.1.2

Microsoft PKI Services CP v3.1.1

Microsoft PKI Services CP v3.1


Microsoft PKI Services Public TLS Certification Practice Statement (CPS)

Microsoft PKI Services Public TLS CPS v3.3.1

Microsoft PKI Services Public TLS CPS v3.3.0

Microsoft PKI Services CPS v3.2.4

Microsoft PKI Services CPS v3.2.3

Microsoft PKI Services CPS v3.2.2

Microsoft PKI Services CPS v3.2.1

Microsoft PKI Services CPS v3.2.0

Microsoft PKI Services CPS v3.1.9

Microsoft PKI Services CPS v3.1.8

Microsoft PKI Services CPS v3.1.7

Microsoft PKI Services CPS v3.1.6

Microsoft PKI Services CPS v3.1.5

Microsoft PKI Services CPS v3.1.4

Microsoft PKI Services CPS v3.1.3

Microsoft PKI Services CPS v3.1.2

Microsoft PKI Services CPS v3.1.1

Microsoft PKI Services CPS v3.1


Microsoft PKI Services Third Party Certification Practice Statement (CPS)

Microsoft PKI Services Third Party CPS v1.0.4

Microsoft PKI Services Third Party CPS v1.0.3

Microsoft PKI Services Third Party CPS v1.0.2


Microsoft PKI Services Corporate Certification Practice Statement (CPS)

Microsoft PKI Services Corporate CPS v3.1.9

Microsoft PKI Services Corporate CPS v3.1.8

Microsoft PKI Services Corporate CPS v3.1.7


Microsoft PKI Services Subscriber Agreement

Microsoft PKI Services Subscriber Agreement


Microsoft PKI Services Relying Party Agreement

Microsoft PKI Services Relying Party Agreement


Privacy Policy

Microsoft Privacy Policy






Audit

WebTrust Audits - MS PKI Services Audit Period runs from May 1 to April 30 each year

2024 Audits

Audit Stream Description Latest WebTrust Seal Latest Audit Letters Applicable CPS (see Policy Section above for latest version)
WTCA Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11434 FINAL - Microsoft PKI WTCA Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Certification Practice Statement (CPS)
Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11434 FINAL - Microsoft PKI ACS WTCA Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Microsoft Trusted Root Store Only https://www.cpacanada.ca/webtrustseal?sealid=11434 FINAL - Microsoft TRP WTCA Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Corporate Certification Practice Statement (CPS)
Microsoft Internal Hierarchies n/a FINAL - Microsoft Internal Only WTCA Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Corporate Certification Practice Statement (CPS)
WTNS Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11437 FINAL - Microsoft PKI WTNS Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Certification Practice Statement (CPS)
Public TLS - WTNS 4.6 https://www.cpacanada.ca/webtrustseal?sealid=11606 Microsoft PKI WTNS 4.6 Independent Accountant's Opinion Report and Management Assertion February 2025 Microsoft PKI Services Certification Practice Statement (CPS)
Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11437 FINAL - Microsoft PKI ACS WTNS Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Code Signing - WTNS 4.6 https://www.cpacanada.ca/webtrustseal?sealid=11606 Microsoft PKI ACS WTNS 4.6 Independent Accountant's Opinion Report and Management Assertion February 2025 Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Microsoft Trusted Root Store Only https://www.cpacanada.ca/webtrustseal?sealid=11437 FINAL - Microsoft TRP WTNS Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Corporate Certification Practice Statement (CPS)
Microsoft Trusted Root Store Only - WTNS 4.6 https://www.cpacanada.ca/webtrustseal?sealid=11606 Microsoft TRP WTNS 4.6 Independent Accountant's Opinion Report and Management Assertion February 2025 Microsoft PKI Services Corporate Certification Practice Statement (CPS)
Microsoft Internal Hierarchies n/a FINAL - Microsoft Internal Only WTNS Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Corporate Certification Practice Statement (CPS)
Microsoft Internal Hierarchies - WTNS 4.6 n/a Microsoft Internal Only WTNS 4.6 Independent Accountant's Opinion Report and Management Assertion February 2025 Microsoft PKI Services Corporate Certification Practice Statement (CPS)
WTBR SSL Public TLS https://www.cpacanada.ca/webtrustseal?sealid=11435 FINAL - Microsoft PKI WTBR Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Certification Practice Statement (CPS)
WTBR CS Code Signing https://www.cpacanada.ca/webtrustseal?sealid=11436 FINAL - Microsoft PKI ACS WTCS Independent Accountant's Opinion Report and Management Assertion July 2024 (Signed).pdf Microsoft PKI Services Third Party Certification Practice Statement (CPS)
Auditor Qualifications July 2024 Microsoft PKI Services - Auditor Qualification Letter July 2024.pdf
February 2025 FY25 Microsoft TSS WebTrust Limited Criteria Examination - Auditor Qualification Letter February 2025