Certificate Auth. Cross Ceertificates

Question

We seem to be having issues with our certificates. I have found a bunch of Cross Certificates out there and not even sure how they got there. We only have one domain, one PKI so how do I stop them from getting created and or can I just delete them? Not finding much from google so any help would be appreciated.

Answer 1

Hello,

Thank you so much for posting here.

A cross-certificate is a digital certificate issued by one Certificate Authority (CA) that is used to sign the public key for the root certificate of another Certificate Authority. Cross-certificates provide a means to create a chain of trust from a single, trusted, root CA to multiple other CAs.

I have checked that there are also some cross certificates in my environment.

For more information, we could refer to:
https://learn.microsoft.com/en-us/windows/win32/seccertenroll/about-cross-certification

https://learn.microsoft.com/en-us/windows-hardware/drivers/install/cross-certificates-for-kernel-mode-code-signing

Best regards,
Hannah Xiong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.