Trusted Root Certification Authorities for Federation Trusts

To establish a federation trust between your Exchange Server 2010 organization and Microsoft Federation Gateway, you must request and install an X.509 SSL certificate from a certification authority (CA) trusted by Windows Live.

The following table lists CAs trusted by Windows Live.

CA certificate friendly name	Thumbprint
Comodo	NA
Digicert Global Root CA	‎083B:E056:9042:46B1:A175:6AC9:5991:C74A
Digicert High Assurance EV Root CA	‎91 8d a5 e4 99 c1 5f 7c 62 75 b1 24 fe de 53 35 7c 34 bd 36
Entrust.net CA (2048)	801D 62D0 7B44 9D5C 5C03 5C98 EA61 FA44 3C2A 58FE
Entrust Secure Server CA	99A6 9BE6 1AFE 886B 4D2B 8200 7CB8 54FC 317E 1539
Go Daddy Secure Certification Authority	‎7c46 56c3 061f 7f4c 0d67 b319 a855 f60e bc11 fc44

For more information about certificate requirements for Federation, see Understanding Federation.