How to check if a certificate is an Azure App Service Managed Certificate?

Question

Hi:

I'm trying to find out how one can check / confirm is a certificate is a free App Service Managed Certificate - aside from some visual differences in the Portal UI, there's really no way to definitively determine this.

Thanks!

Richard

Answer 1

@Richard Chua Thank you for your question regarding managing Azure App Service Managed Certificates.

The big difference for Azure App Service Managed certificates is that they are issued by DigiCert, Inc. In your above screenshot, DigiCert is listed as the issuer. This is mentioned in the documentation here. For purchased certificates from Azure (standard or wildcard) Wild West Domains should be the issuer of the certificate.

A less reliable way to check is via the thumbprint of the certificate. Below is a managed certificate (free) that I created. This thumbprint is unique to managed certificates and will not overlap with any paid certificates that you may have. The product group is working on removing thumbprint IDs from the portal to avoid customer confusion as there have been a number of times where customers have hardcoded this thumbprint into their code (not supported) and when we change the thumbprint, their apps break.

I hope these two clarifications help provide you some confidence as you go about managing your certificates. If you have any further questions, please reply here.

Answer 2

I guess, by checking the issuer details of the certificate, we can distinguish the type of the certificate. Microsoft issued certificate (free certificate) will indicate the issuer name as Microsoft Corporation as shown below:

Also, there are few other indications. Free certificate has some limitations. If you are seeing the certificate without the following challeges, it could be a private issued certificate

configure-ssl-certificate

Issuer name will be different for a third party issuer.

----------

--please don't forget to upvote and Accept as answer if the reply is helpful--