Microsoft 365 encryption chains
Microsoft 365 leverages a number of different certificate providers. The following describes the complete list of known Microsoft 365 root certificates that customers may encounter when accessing Microsoft 365. For information on the certificates you may need to install in your own infrastructure, see Plan for third-party SSL certificates for Microsoft 365. The following certificate information applies to all worldwide and national cloud instances of Microsoft 365.
Last updated: 4/25/2022
Note
For certificate information that applies to DOD and GCC High customers, see Microsoft 365 encryption chains - DOD and GCC High.
| Certificate type | P7b download | CRL Endpoints | OCSP Endpoints | AIA Endpoints |
|---|---|---|---|---|
| Publicly Trusted Root Certificates | Microsoft 365 Root Certificate Bundle (P7B) | crl.globalsign.net www.d-trust.net |
N/A | N/A |
| Publicly Trusted Intermediate Certificates | Microsoft 365 Intermediate Certificate Bundle (P7B) | cdp1.public-trust.com crl.cnnic.cn crl.entrust.net crl.globalsign.com crl.globalsign.net crl.identrust.com crl.thawte.com crl3.digicert.com crl4.digicert.com s1.symcb.com www.d-trust.net |
isrg.trustid.ocsp.identrust.com ocsp.digicert.com ocsp.entrust.net ocsp.globalsign.com ocsp.omniroot.com ocsp.startssl.com ocsp.thawte.com ocsp2.globalsign.com ocspcnnicroot.cnnic.cn root-c3-ca2-2009.ocsp.d-trust.net root-c3-ca2-ev-2009.ocsp.d-trust.net s2.symcb.com |
aia.startssl.com apps.identrust.com cacert.omniroot.com www.cnnic.cn |
Expand the root and intermediate sections below to see additional details about the certificate providers.
Tip
If you're not an E5 customer, use the 90-day Microsoft Purview solutions trial to explore how additional Purview capabilities can help your organization manage data security and compliance needs. Start now at the Microsoft Purview compliance portal trials hub. Learn details about signing up and trial terms.
Microsoft 365 Root Certificate Details
Baltimore CyberTrust Root
| Subject | CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE |
|---|---|
| Serial Number | 02:00:00:B9 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | May 12 18:46:00 2000 UTC |
| Validity Not After | May 12 23:59:00 2025 UTC |
| Subject Key Identifier | e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | D4DE20D05E66FC53FE1A50882C78DB2852CAE474 |
| Thumbprint (SHA-256) | 16AF57A9F676B0AB126095AA5EBADEF22AB31119D644AC95CD4B93DBF3F26AEB |
| Pin (SHA-256) | Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o= |
CNNIC ROOT
| Subject | CN=CNNIC ROOT O=CNNIC C=CN |
|---|---|
| Serial Number | 49:33:00:01 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Apr 16 07:09:14 2007 UTC |
| Validity Not After | Apr 16 07:09:14 2027 UTC |
| Subject Key Identifier | 65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11 |
| Authority Key Identifier | keyid:65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11 |
| Thumbprint (SHA-1) | 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F |
| Thumbprint (SHA-256) | E28393773DA845A679F2080CC7FB44A3B7A1C3792CB7EB7729FDCB6A8D99AEA7 |
| Pin (SHA-256) | H0IkzshPyZztiB/2/P0+IfjFGcVHqmpd094kcwLOUNE= |
DigiCert Global Root CA
| Subject | CN=DigiCert Global Root CA OU=www.digicert.com O=DigiCert Inc C=US |
|---|---|
| Serial Number | 08:3B:E0:56:90:42:46:B1:A1:75:6A:C9:59:91:C7:4A |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Nov 10 00:00:00 2006 UTC |
| Validity Not After | Nov 10 00:00:00 2031 UTC |
| Subject Key Identifier | 03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Authority Key Identifier | keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 |
| Thumbprint (SHA-256) | 4348A0E9444C78CB265E058D5E8944B4D84F9662BD26DB257F8934A443C70161 |
| Pin (SHA-256) | r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E= |
DigiCert Global Root G2
| Subject | CN=DigiCert Global Root G2 OU=www.digicert.com O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 03:3A:F1:E6:A7:11:A9:A0:BB:28:64:B1:1D:09:FA:E5 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Thursday, August 1, 2013 5:00 AM |
| Validity Not Until | Friday, January 15, 2038 4:00 AM |
| Subject Key Identifier | 4E2254201895E6E36EE60FFAFAB912ED06178F39 |
| Authority Key Identifier | KeyID:4e:22:54:20:18:95:e6:e3:6e:e6:0f:fa:fa:b9:12:ed:06:17:8f:39 |
| Thumbprint (SHA-1) | DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
| Thumbprint (SHA-256) | CB3CCBB76031E5E0138F8DD39A23F9DE47FFC35E43C1144CEA27D46A5AB1CB5F |
DigiCert High Assurance EV Root CA
| Subject | CN=DigiCert High Assurance EV Root CA OU=www.digicert.com O=DigiCert Inc C=US |
|---|---|
| Serial Number | 02:AC:5C:26:6A:0B:40:9B:8F:0B:79:F2:AE:46:25:77 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Nov 10 00:00:00 2006 UTC |
| Validity Not After | Nov 10 00:00:00 2031 UTC |
| Subject Key Identifier | b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3 |
| Authority Key Identifier | keyid:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3 |
| Thumbprint (SHA-1) | 5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 |
| Thumbprint (SHA-256) | 7431E5F4C3C1CE4690774F0B61E05440883BA9A01ED00BA6ABD7806ED3B118CF |
| Pin (SHA-256) | WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18= |
D-TRUST Root Class 3 CA 2 2009
| Subject | CN=D-TRUST Root Class 3 CA 2 2009 O=D-Trust GmbH C=DE |
|---|---|
| Serial Number | 09:83:F3 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Nov 05 08:35:58 2009 UTC |
| Validity Not After | Nov 05 08:35:58 2029 UTC |
| Subject Key Identifier | fd:da:14:c4:9f:30:de:21:bd:1e:42:39:fc:ab:63:23:49:e0:f1:84 |
| Thumbprint (SHA-1) | 58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0 |
| Thumbprint (SHA-256) | 49E7A442ACF0EA6287050054B52564B650E4F49E42E348D6AA38E039E957B1C1 |
| Pin (SHA-256) | 7KDxgUAs56hlKzG00DbfJH46MLf0GlDZHsT5CwBrQ6E= |
| CRL URLs | ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl |
D-TRUST Root Class 3 CA 2 EV 2009
| Subject | CN=D-TRUST Root Class 3 CA 2 EV 2009 O=D-Trust GmbH C=DE |
|---|---|
| Serial Number | 09:83:F4 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Nov 05 08:50:46 2009 UTC |
| Validity Not After | Nov 05 08:50:46 2029 UTC |
| Subject Key Identifier | d3:94:8a:4c:62:13:2a:19:2e:cc:af:72:8a:7d:36:d7:9a:1c:dc:67 |
| Thumbprint (SHA-1) | 96C91B0B95B4109842FAD0D82279FE60FAB91683 |
| Thumbprint (SHA-256) | EEC5496B988CE98625B934092EEC2908BED0B0F316C2D4730C84EAF1F3D34881 |
| Pin (SHA-256) | /zQvtsTIvTCkcG9zSJU58Z5uSMwF9GJUZU9mENvFQOk= |
| CRL URLs | ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl |
Entrust Root Certification Authority - G2
| Subject | CN=Entrust Root Certification Authority - G2 OU="(c) 2009 Entrust, Inc. - for authorized use only" OU=See www.entrust.net/legal-terms O="Entrust, Inc." C=US |
|---|---|
| Serial Number | 4A:53:8C:28 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Jul 07 17:25:54 2009 UTC |
| Validity Not After | Dec 07 17:55:54 2030 UTC |
| Subject Key Identifier | 6a:72:26:7a:d0:1e:ef:7d:e7:3b:69:51:d4:6c:8d:9f:90:12:66:ab |
| Thumbprint (SHA-1) | 8CF427FD790C3AD166068DE81E57EFBB932272D4 |
| Thumbprint (SHA-256) | 43DF5774B03E7FEF5FE40D931A7BEDF1BB2E6B42738C4E6D3841103D3AA7F339 |
| Pin (SHA-256) | du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U= |
Entrust.net Certification Authority (2048)
| Subject | CN=Entrust.net Certification Authority (2048) OU=(c) 1999 Entrust.net Limited OU=www.entrust.net/CPS_2048 incorp. by ref. (limit s liab.) O=Entrust.net |
|---|---|
| Serial Number | 38:63:DE:F8 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Dec 24 17:50:51 1999 UTC |
| Validity Not After | Jul 24 14:15:12 2029 UTC |
| Subject Key Identifier | 55:e4:81:d1:11:80:be:d8:89:b9:08:a3:31:f9:a1:24:09:16:b9:70 |
| Thumbprint (SHA-1) | 503006091D97D4F5AE39F7CBE7927D7D652D3431 |
| Thumbprint (SHA-256) | 6DC47172E01CBCB0BF62580D895FE2B8AC9AD4F873801E0C10B9C837D21EB177 |
| Pin (SHA-256) | HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg= |
GlobalSign Root CA - R1
| Subject | CN=GlobalSign Root CA OU=Root CA O=GlobalSign nv-sa C=BE |
|---|---|
| Serial Number | 04:00:00:00:00:01:15:4B:5A:C3:94 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Sep 01 12:00:00 1998 UTC |
| Validity Not After | Jan 28 12:00:00 2028 UTC |
| Subject Key Identifier | 60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b |
| Thumbprint (SHA-1) | B1BC968BD4F49D622AA89A81F2150152A41D829C |
| Thumbprint (SHA-256) | EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99 |
| Pin (SHA-256) | K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q= |
GlobalSign Root CA - R3
| Subject | CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3 |
|---|---|
| Issuer | CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 |
| Serial Number | 04:00:00:00:00:01:21:58:53:08:A2 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Wednesday, March 18, 2009 3:00 AM |
| Validity Not Until | Sunday, March 18, 2029 3:00 AM |
| Subject Key Identifier | 8FF04B7FA82E4524AE4D50FA639A8BDEE2DD1BBC |
| Authority Key Identifier | KeyID:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc |
| Thumbprint (SHA-1) | D69B561148F01C77C54578C10926DF5B856976AD |
| Thumbprint (SHA-256) | CBB522D7B7F127AD6A0113865BDF1CD4102E7D0759AF635A7CF4720DC963C53B |
ISRG Root X1
| Subject | C = US, O = Internet Security Research Group, CN = ISRG Root X1 |
|---|---|
| Serial Number | 82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00 |
| Public Key Length | RSA 4096 bit |
| Signature Algorithm | sha256WithRSAEncryption |
| Validity Not Before | Jun 4 11:04:38 2015 UTC |
| Validity Not After | Jun 4 11:04:38 2035 UTC |
| Subject Key Identifier | 79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E |
| Thumbprint (SHA-1) | CABD2A79A1076A31F21D253635CB039D4329A5E8 |
| Thumbprint (SHA-256) | 96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6 |
| Pin (SHA-256) | 0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3 |
thawte Primary Root CA - G3
| Subject | CN=thawte Primary Root CA - G3 OU="(c) 2008 thawte, Inc. - For authorized use only" OU=Certification Services Division O="thawte, Inc." C=US |
|---|---|
| Serial Number | 60:01:97:B7:46:A7:EA:B4:B4:9A:D6:4B:2F:F7:90:FB |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Apr 02 00:00:00 2008 UTC |
| Validity Not After | Dec 01 23:59:59 2037 UTC |
| Subject Key Identifier | ad:6c:aa:94:60:9c:ed:e4:ff:fa:3e:0a:74:2b:63:03:f7:b6:59:bf |
| Thumbprint (SHA-1) | F18B538D1BE903B6A6F056435B171589CAF36BF2 |
| Thumbprint (SHA-256) | 4B03F45807AD70F21BFC2CAE71C9FDE4604C064CF5FFB686BAE5DBAAD7FDD34C |
| Pin (SHA-256) | GQbGEk27Q4V40A4GbVBUxsN/D6YCjAVUXgmU7drshik= |
VeriSign Class 3 Public Primary Certification Authority - G5
| Subject | CN=VeriSign Class 3 Public Primary Certification Authority - G5 OU="(c) 2006 VeriSign, Inc. - For authorized use only" OU=VeriSign Trust Network O="VeriSign, Inc." C=US |
|---|---|
| Serial Number | 18:DA:D1:9E:26:7D:E8:BB:4A:21:58:CD:CC:6B:3B:4A |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Nov 08 00:00:00 2006 UTC |
| Validity Not After | Jul 16 23:59:59 2036 UTC |
| Subject Key Identifier | 7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33 |
| Thumbprint (SHA-1) | 4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5 |
| Thumbprint (SHA-256) | 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF |
| Pin (SHA-256) | JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg= |
Microsoft 365 Intermediate Certificate Details
CNNIC SHA256 SSL
| Subject | CN=CNNIC SHA256 SSL O=CNNIC SHA256 SSL C=CN |
|---|---|
| Issuer | CN=CNNIC ROOT O=CNNIC C=CN |
| Serial Number | 49:33:00:7C |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Dec 18 12:32:18 2014 UTC |
| Validity Not After | Dec 18 12:32:18 2024 UTC |
| Subject Key Identifier | b7:d1:59:8b:8c:0d:06:28:47:23:00:3a:36:04:a5:ee:38:76:53:3c |
| Authority Key Identifier | keyid:65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11 |
| Thumbprint (SHA-1) | FC844648FC708433921BE88B18C48787A3E2813E |
| Thumbprint (SHA-256) | FA8B9F99DBB94E7B772AA9190846E777047C15C7A3BF4A1AF9C0CA984A689511 |
| Pin (SHA-256) | dKZRcLDh7hBNZTmTIHOGJ6C2Om/ITjUCPkOnLTnrZXk= |
| AIA URLs | http://www.cnnic.cn/download/cert/CNNICROOT.cer |
| CRL URLs | ldap:///CN=crl1,%20OU=crl,%20O=CNNIC,%20C=CN?certificateRevocationList;binary,authorityRevocationList;binary,deltaRevocationList;binary http://crl.cnnic.cn/download/rootsha2crl/CRL1.crl |
| OCSP URLs | http://ocspcnnicroot.cnnic.cn |
D-TRUST SSL Class 3 CA 1 2009
| Subject | CN=D-TRUST SSL Class 3 CA 1 2009 O=D-Trust GmbH C=DE |
|---|---|
| Issuer | CN=D-TRUST Root Class 3 CA 2 2009 O=D-Trust GmbH C=DE |
| Subject Alternative Name | RFC822 Name=info@d-trust.net URL=http://www.d-trust.net |
| Serial Number | 09:90:63 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Nov 12 12:46:55 2009 UTC |
| Validity Not After | Nov 05 08:35:58 2029 UTC |
| Subject Key Identifier | 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a |
| Authority Key Identifier | keyid:fd:da:14:c4:9f:30:de:21:bd:1e:42:39:fc:ab:63:23:49:e0:f1:84 |
| Thumbprint (SHA-1) | 2FC5DE6528CDBE50A14C382FC1DE524FAABF95FC |
| Thumbprint (SHA-256) | 6AC159B4C2BC8E729F3B84642EF1286BCC80D775FE278C740ADA468D59439025 |
| Pin (SHA-256) | 9w0QP9HzLXkfs+4zENaUFq2XKcQON1oyksoJ+Gg2AZE= |
| CRL URLs | ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl |
| OCSP URLs | http://root-c3-ca2-2009.ocsp.d-trust.net |
D-TRUST SSL Class 3 CA 1 EV 2009
| Subject | CN=D-TRUST SSL Class 3 CA 1 EV 2009 O=D-Trust GmbH C=DE |
|---|---|
| Issuer | CN=D-TRUST Root Class 3 CA 2 EV 2009 O=D-Trust GmbH C=DE |
| Subject Alternative Name | RFC822 Name=info@d-trust.net URL=http://www.d-trust.net |
| Serial Number | 09:90:64 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Nov 12 12:52:43 2009 UTC |
| Validity Not After | Nov 05 08:50:46 2029 UTC |
| Subject Key Identifier | ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4 |
| Authority Key Identifier | keyid:d3:94:8a:4c:62:13:2a:19:2e:cc:af:72:8a:7d:36:d7:9a:1c:dc:67 |
| Thumbprint (SHA-1) | 1069423D308D0FC54575059638560FC7556E32B3 |
| Thumbprint (SHA-256) | B0935DC04B4E60C0C42DEF7EC57A1B1D8F958D17988E71CC80A8CF5E635BA5B4 |
| Pin (SHA-256) | lv5BNZ5aWd27ooolULDolFTwIaaWjHvG4yyH3rss4X8= |
| CRL URLs | ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl |
| OCSP URLs | http://root-c3-ca2-ev-2009.ocsp.d-trust.net |
DigiCert Basic RSA CN CA G2
| Subject | CN=DigiCert Basic RSA CN CA G2 O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 02:F7:E1:F9:82:BA:D0:09:AF:F4:7D:C9:57:41:B2:F6 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Wednesday, March 4, 2020 4:04 AM |
| Validity Not Until | Monday, March 4, 2030 4:04 AM |
| Subject Key Identifier | 06BDA69B60795031BED5A9024AA0D095538B2F34 |
| Authority Key Identifier | KeyID:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | 4D1FA5D1FB1AC3917C08E43F65015E6AEA571179 |
| Thumbprint (SHA-256) | CB57B3FF2040CB269497625BC90FA9D7B4ED4938C6F60F42F69AFDF508AC2993 |
| CRL URLs | http://crl.digicert.cn/DigiCertGlobalRootCA.crl |
| OCSP URLs | http://ocsp.digicert.cn |
DigiCert Cloud Services CA-1 (older)
| Subject | CN=DigiCert Cloud Services CA-1 O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root CA OU=www.digicert.com O=DigiCert Inc C=US |
| Serial Number | 01:9E:C1:C6:BD:3F:59:7B:B2:0C:33:38:E5:51:D8:77 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | August 4, 2015 12:00 AM |
| Validity Not Until | August 4, 2030 12:00 AM |
| Subject Key Identifier | dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7 |
| Authority Key Identifier | 03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | 81B68D6CD2f221F8F534E677523BB236BBA1DC56 |
| Thumbprint (SHA-256) | 2F6889961A7CA7067E8BA103C2CF9B9A924F8CA293F11178E23A1978D2F133D3 |
| Pin (SHA-256) | UgpUVparimk8QCjtWQaUQ7EGrtrykc/L8N66EhFY3VE= |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootCA.crl http://crl4.digicert.com/DigiCertGlobalRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
DigiCert Cloud Services CA-1
| Subject | CN=DigiCert Cloud Services CA-1 O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root CA OU=www.digicert.com O=DigiCert Inc C=US |
| Serial Number | 0F:17:1A:48:C6:F2:23:80:92:18:CD:2E:D6:DD:C0:E8 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | September 25, 2020 00:00 AM |
| Validity Not After | September 24, 2030 11:59 PM |
| Subject Key Identifier | dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7 |
| Authority Key Identifier | 03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | B3F6B64A07BB9611F47174407841F564FB991F29 |
| Thumbprint (SHA-256) | 5F88694615E4C61686E106B84C3338C6720C535F60D36F61282ED15E1977DD44 |
| Pin (SHA-256) | UgpUVparimk8QCjtWQaUQ7EGrtrykc/L8N66EhFY3VE= |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootCA.crl http://crl4.digicert.com/DigiCertGlobalRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
DigiCert SHA2 Extended Validation Server CA
| Subject | CN=DigiCert SHA2 Extended Validation Server CA OU=www.digicert.com O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 0C:79:A9:44:B0:8C:11:95:20:92:61:5F:E2:6B:1D:83 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Tuesday, October 22, 2013 5:00 AM |
| Validity Not Until | Sunday, October 22, 2028 5:00 AM |
| Subject Key Identifier | 3DD350A5D6A0ADEEF34A600A65D321D4F8F8D60F |
| Authority Key Identifier | KeyID:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3 |
| Thumbprint (SHA-1) | 7E2F3A4F8FE8FA8A5730AECA029696637E986F3F |
| Thumbprint (SHA-256) | 403E062A2653059113285BAF80A0D4AE422C848C9F78FAD01FC94BC5B87FEF1A |
| CRL URLs | http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
DigiCert SHA2 High Assurance Server CA
| Subject | CN=DigiCert SHA2 High Assurance Server CA OU=www.digicert.com O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert High Assurance EV Root CA OU=www.digicert.com O=DigiCert Inc C=US |
| Serial Number | 04:E1:E7:A4:DC:5C:F2:F3:6D:C0:2B:42:B8:5D:15:9F |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Oct 22 12:00:00 2013 UTC |
| Validity Not After | Oct 22 12:00:00 2028 UTC |
| Subject Key Identifier | 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b |
| Authority Key Identifier | keyid:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3 |
| Thumbprint (SHA-1) | A031C46782E6E6C662C2C87C76DA9AA62CCABD8E |
| Thumbprint (SHA-256) | 19400BE5B7A31FB733917700789D2F0A2471C0C9D506C0E504C06C16D7CB17C0 |
| Pin (SHA-256) | k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws= |
| CRL URLs | http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
DigiCert SHA2 Secure Server CA
| Subject | CN=DigiCert SHA2 Secure Server CA O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root CA OU=www.digicert.com O=DigiCert Inc C=US |
| Serial Number | 01:FD:A3:EB:6E:CA:75:C8:88:43:8B:72:4B:CF:BC:91 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Mar 08 12:00:00 2013 UTC |
| Validity Not After | Mar 08 12:00:00 2023 UTC |
| Subject Key Identifier | 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2 |
| Authority Key Identifier | keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | 1FB86B1168EC743154062E8C9CC5B171A4B7CCB4 |
| Thumbprint (SHA-256) | 154C433C491929C5EF686E838E323664A00E6A0D822CCC958FB4DAB03E49A08F |
| Pin (SHA-256) | 5kJvNEMw0KjrCAu7eXY5HZdvyCS13BbA0VJG1RSP91w= |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootCA.crl http://crl4.digicert.com/DigiCertGlobalRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
DigiCert SHA2 Secure Server CA
| Subject | CN=DigiCert SHA2 Secure Server CA O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 02:74:2E:AA:17:CA:8E:21:C7:17:BB:1F:FC:FD:0C:A0 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Tuesday, September 22, 2020 5:00 PM |
| Validity Not Until | Sunday, September 22, 2030 4:59 PM |
| Subject Key Identifier | 0F80611C823161D52F28E78D4638B42CE1C6D9E2 |
| Authority Key Identifier | KeyID:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | 626D44E704D1CEABE3BF0D53397464AC8080142C |
| Thumbprint (SHA-256) | C1AD7778796D20BCA65C889A2655021156528BB62FF5FA43E1B8E5A83E3D2EAA |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootCA.crl http://crl4.digicert.com/DigiCertGlobalRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
DigiCert TLS RSA SHA256 2020 CA1
| Subject | CN=DigiCert TLS RSA SHA256 2020 CA1 O=DigiCert Inc C=US |
|---|---|
| Issuer | CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 0A:35:08:D5:5C:29:2B:01:7D:F8:AD:65:C0:0F:F7:E4 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Wednesday, September 23, 2020 5:00 PM |
| Validity Not Until | Monday, September 23, 2030 4:59 PM |
| Subject Key Identifier | B76BA2EAA8AA848C79EAB4DA0F98B2C59576B9F4 |
| Authority Key Identifier | KeyID:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55 |
| Thumbprint (SHA-1) | 6938FD4D98BAB03FAADB97B34396831E3780AEA1 |
| Thumbprint (SHA-256) | 25768713D3B459F9382D2A594F85F34709FD2A8930731542A4146FFB246BEC69 |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootCA.crl http://crl4.digicert.com/DigiCertGlobalRootCA.crl |
| OCSP URLs | http://ocsp.digicert.com |
Entrust Certification Authority - L1C
| Subject | CN=Entrust Certification Authority - L1C OU="(c) 2009 Entrust, Inc." OU=www.entrust.net/rpa is incorporated by reference O="Entrust, Inc." C=US |
|---|---|
| Issuer | CN=Entrust.net Certification Authority (2048) OU=(c) 1999 Entrust.net Limited OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.) O=Entrust.net |
| Serial Number | 4C:0E:8C:39 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha1RSA |
| Validity Not Before | Nov 11 15:40:40 2011 UTC |
| Validity Not After | Nov 12 02:51:17 2021 UTC |
| Subject Key Identifier | 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d |
| Authority Key Identifier | keyid:55:e4:81:d1:11:80:be:d8:89:b9:08:a3:31:f9:a1:24:09:16:b9:70 |
| Thumbprint (SHA-1) | C53E73073F93CE7895DE7484126BC303DAB9E657 |
| Thumbprint (SHA-256) | 0EE4DAF71A85D842D23F4910FD4C909B7271861931F1D5FEAC868225F52700E2 |
| Pin (SHA-256) | VFv5NemtodoRftw8KsvFb8AoCWwOJL6bOJS+Ui0bQ94= |
| CRL URLs | http://crl.entrust.net/2048ca.crl |
| OCSP URLs | http://ocsp.entrust.net |
Entrust Certification Authority - L1K
| Subject | CN=Entrust Certification Authority - L1K OU="(c) 2012 Entrust, Inc. - for authorized use only" OU=See www.entrust.net/legal-terms O="Entrust, Inc." C=US |
|---|---|
| Issuer | CN=Entrust Root Certification Authority - G2 OU="(c) 2009 Entrust, Inc. - for authorized use only" OU=See www.entrust.net/legal-terms O="Entrust, Inc." C=US |
| Serial Number | 0E:E9:4C:C3:00:00:00:00:51:D3:77:85 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Oct 05 19:13:56 2015 UTC |
| Validity Not After | Dec 05 19:43:56 2030 UTC |
| Subject Key Identifier | 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf |
| Authority Key Identifier | keyid:6a:72:26:7a:d0:1e:ef:7d:e7:3b:69:51:d4:6c:8d:9f:90:12:66:ab |
| Thumbprint (SHA-1) | F21C12F46CDB6B2E16F09F9419CDFF328437B2D7 |
| Thumbprint (SHA-256) | 13EFB39A2F6654E8C67BD04F4C6D4C90CD6CAB5091BCEDC73787F6B77D3D3FE7 |
| Pin (SHA-256) | 980Ionqp3wkYtN9SZVgMzuWQzJta1nfxNPwTem1X0uc= |
| CRL URLs | http://crl.entrust.net/g2ca.crl |
| OCSP URLs | http://ocsp.entrust.net |
GlobalSign Extended Validation CA - SHA256 - G2
| Subject | CN=GlobalSign Extended Validation CA - SHA256 - G2 O=GlobalSign nv-sa C=BE |
|---|---|
| Issuer | CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R2 |
| Serial Number | 04:00:00:00:00:01:44:4E:F0:4A:55 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Feb 20 10:00:00 2014 UTC |
| Validity Not After | Dec 15 08:00:00 2021 UTC |
| Subject Key Identifier | da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02 |
| Authority Key Identifier | keyid:9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e |
| Thumbprint (SHA-1) | 65BE102BE26928650E0EF54DC8F4F15AF5F98E8B |
| Thumbprint (SHA-256) | 24F91C0705A0A5338641B365FB0D9D9709B56297CFF1857E73C02C1636D486AA |
| Pin (SHA-256) | LvRiGEjRqfzurezaWuj8Wie2gyHMrW5Q06LspMnox7A= |
| CRL URLs | http://crl.globalsign.net/root-r2.crl |
| OCSP URLs | http://ocsp.globalsign.com/rootr2 |
GlobalSign Extended Validation CA - SHA256 - G3
| Subject | CN=GlobalSign Extended Validation CA - SHA256 - G3 O=GlobalSign nv-sa C=BE |
|---|---|
| Issuer | CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3 |
| Serial Number | 48:A4:02:DD:27:92:0D:A2:08:34:9D:D1:99:7B |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Sep 21 00:00:00 2016 UTC |
| Validity Not After | Sep 21 00:00:00 2026 UTC |
| Subject Key Identifier | dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d |
| Authority Key Identifier | keyid:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc |
| Thumbprint (SHA-1) | 6023192FE7B59D2789130A9FE4094F9B5570D4A2 |
| Thumbprint (SHA-256) | AED5DD9A5339685DFB029F6D89A14335A96512C3CACC52B2994AF8B6B37FA4D2 |
| Pin (SHA-256) | 86fLIetopQLDNxFZ0uMI66Xpl1pFgLlHHn9v6kT0i4I= |
| CRL URLs | http://crl.globalsign.com/root-r3.crl |
| OCSP URLs | http://ocsp2.globalsign.com/rootr3 |
GlobalSign Organization Validation CA - SHA256 - G2 (older)
| Subject | CN=GlobalSign Organization Validation CA - SHA256 - G2 O=GlobalSign nv-sa C=BE |
|---|---|
| Issuer | CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3 |
| Serial Number | 04:00:00:00:00:01:31:89:C6:44:C9 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Aug 02 10:00:00 2011 UTC |
| Validity Not After | Aug 02 10:00:00 2022 UTC |
| Subject Key Identifier | 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c |
| Authority Key Identifier | keyid:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc |
| Thumbprint (SHA-1) | EF90B2B86F4756EBE7D36FF3015D63523A0076E9 |
| Thumbprint (SHA-256) | 0B339212D7CFF17A2C59E35669B58E77350133750A78DA9404770EDD470DEF76 |
| Pin (SHA-256) | IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4= |
| CRL URLs | http://crl.globalsign.net/root-r3.crl |
| OCSP URLs | http://ocsp2.globalsign.com/rootr3 |
GlobalSign Organization Validation CA - SHA256 - G2
| Subject | CN=GlobalSign Organization Validation CA - SHA256 - G2 O=GlobalSign nv-sa C=BE |
|---|---|
| Issuer | CN=GlobalSign Root CA OU=Root CA O=GlobalSign nv-sa C=BE |
| Serial Number | 04:00:00:00:00:01:44:4E:F0:42:47 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Feb 20 10:00:00 2014 UTC |
| Validity Not After | Feb 20 10:00:00 2024 UTC |
| Subject Key Identifier | 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c |
| Authority Key Identifier | keyid:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b |
| Thumbprint (SHA-1) | 902EF2DEEB3C5B13EA4C3D5193629309E231AE55 |
| Thumbprint (SHA-256) | 74EF335E5E18788307FB9D89CB704BEC112ABD23487DBFF41C4DED5070F241D9 |
| Pin (SHA-256) | IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4= |
| CRL URLs | http://crl.globalsign.net/root.crl |
| OCSP URLs | http://ocsp.globalsign.com/rootr1 |
GlobalSign Organization Validation CA - SHA256 - G3
| Subject | CN=GlobalSign Organization Validation CA - SHA256 - G3 O=GlobalSign nv-sa C=BE |
|---|---|
| Issuer | CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE |
| Serial Number | 47:07:B1:01:9A:0C:57:AD:39:B3:E1:7D:A9:F9 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Thursday, September 3, 2015 5:00 PM |
| Validity Not Until | Wednesday, September 3, 2025 5:00 PM |
| Subject Key Identifier | 6886B87D7AD96D496B872F188B15346CD7B47A0E |
| Authority Key Identifier | KeyID:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b |
| Thumbprint (SHA-1) | 20D1EBAB5A71587B9116E4C74415D1A85B0DDDA5 |
| Thumbprint (SHA-256) | 699D54B7482A5D329331EA0415CC2EDCD60FDA01D19E71D054196BCE0677735C |
| CRL URLs | http://crl.globalsign.com/root.crl |
| OCSP URLs | http://ocsp.globalsign.com/rootr1 |
GlobalSign RSA OV SSL CA 2018
| Subject | CN=GlobalSign RSA OV SSL CA 2018 O=GlobalSign nv-sa C=BE |
|---|---|
| Issuer | CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 |
| Serial Number | 01:EE:5F:22:1D:FC:62:3B:D4:33:3A:85:57 |
| Public Key Length | RSA 2048 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Tuesday, November 20, 2018 4:00 PM |
| Validity Not Until | Monday, November 20, 2028 4:00 PM |
| Subject Key Identifier | F8EF7FF2CD7867A8DE6F8F248D88F1870302B3EB |
| Authority Key Identifier | KeyID:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc |
| Thumbprint (SHA-1) | DFE83023062B997682708B4EAB8E819AFF5D9775 |
| Thumbprint (SHA-256) | B676FFA3179E8812093A1B5EAFEE876AE7A6AAF231078DAD1BFB21CD2893764A |
| CRL URLs | http://crl.globalsign.com/root-r3.crl |
| OCSP URLs | http://ocsp2.globalsign.com/rootr3 |
Let's Encrypt Authority X3
| Subject | CN=Let's Encrypt Authority X3 O=Let's Encrypt C=US |
|---|---|
| Issuer | CN=DST Root CA X3 O=Digital Signature Trust Co. |
| Serial Number | 0A:01:41:42:00:00:01:53:85:73:6A:0B:85:EC:A7:08 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Mar 17 16:40:46 2016 UTC |
| Validity Not After | Mar 17 16:40:46 2021 UTC |
| Subject Key Identifier | a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1 |
| Authority Key Identifier | keyid:c4:a7:b1:a4:7b:2c:71:fa:db:e1:4b:90:75:ff:c4:15:60:85:89:10 |
| Thumbprint (SHA-1) | E6A3B45B062D509B3382282D196EFE97D5956CCB |
| Thumbprint (SHA-256) | 25847D668EB4F04FDD40B12B6B0740C567DA7D024308EB6C2C96FE41D9DE218D |
| Pin (SHA-256) | YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg= |
| AIA URLs | http://apps.identrust.com/roots/dstrootcax3.p7c |
| CRL URLs | http://crl.identrust.com/DSTROOTCAX3CRL.crl |
| OCSP URLs | http://isrg.trustid.ocsp.identrust.com |
Microsoft Azure TLS Issuing CA 01
| Subject | CN=Microsoft Azure TLS Issuing CA 01 O=Microsoft Corporation C=US |
|---|---|
| Issuer | CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 0A:AF:A6:C5:CA:63:C4:51:41:EA:3B:E1:F7:C7:53:17 |
| Public Key Length | RSA 4096 bits |
| Signature Algorithm | sha384RSA |
| Validity Not Before | Wednesday, July 29, 2020 5:30 AM |
| Validity Not Until | Thursday, June 27, 2024 4:59 PM |
| Subject Key Identifier | 0F205DD7A15795DB92CF2BD0C7C27704CE728076 |
| Authority Key Identifier | KeyID:4e:22:54:20:18:95:e6:e3:6e:e6:0f:fa:fa:b9:12:ed:06:17:8f:39 |
| Thumbprint (SHA-1) | 2F2877C5D778C31E0F29C7E371DF5471BD673173 |
| Thumbprint (SHA-256) | 24C7299864E0A2A6964F551C0E8DF2461532FA8C48E4DBBB6080716691F190E5 |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootG2.crl http://crl4.digicert.com/DigiCertGlobalRootG2.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft Azure TLS Issuing CA 02
| Subject | CN=Microsoft Azure TLS Issuing CA 02 O=Microsoft Corporation C=US |
|---|---|
| Issuer | CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 0C:6A:E9:7C:CE:D5:99:83:86:90:A0:0A:9E:A5:32:14 |
| Public Key Length | RSA 4096 bits |
| Signature Algorithm | sha384RSA |
| Validity Not Before | Wednesday, July 29, 2020 5:30 AM |
| Validity Not Until | Thursday, June 27, 2024 4:59 PM |
| Subject Key Identifier | 00AB91FC216226979AA8791B61419060A96267FD |
| Authority Key Identifier | KeyID:4e:22:54:20:18:95:e6:e3:6e:e6:0f:fa:fa:b9:12:ed:06:17:8f:39 |
| Thumbprint (SHA-1) | E7EEA674CA718E3BEFD90858E09F8372AD0AE2AA |
| Thumbprint (SHA-256) | 15A98761EBE011554DA3A46D206B0812CB2EB69AE87AAA11A6DD4CB84ED5142A |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootG2.crl http://crl4.digicert.com/DigiCertGlobalRootG2.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft Azure TLS Issuing CA 05
| Subject | CN=Microsoft Azure TLS Issuing CA 05 O=Microsoft Corporation C=US |
|---|---|
| Issuer | CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 0D:7B:ED:E9:7D:82:09:96:7A:52:63:1B:8B:DD:18:BD |
| Public Key Length | RSA 4096 bits |
| Signature Algorithm | sha384RSA |
| Validity Not Before | Wednesday, July 29, 2020 5:30 AM |
| Validity Not Until | Thursday, June 27, 2024 4:59 PM |
| Subject Key Identifier | C7B29C7F1CE3B85AEFE9681AA85D94C126526A68 |
| Authority Key Identifier | KeyID:4e:22:54:20:18:95:e6:e3:6e:e6:0f:fa:fa:b9:12:ed:06:17:8f:39 |
| Thumbprint (SHA-1) | 6C3AF02E7F269AA73AFD0EFF2A88A4A1F04ED1E5 |
| Thumbprint (SHA-256) | D6831BA43607F5AC19778D627531562AF55145F191CAB5EFAFA0E0005442B302 |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootG2.crl http://crl4.digicert.com/DigiCertGlobalRootG2.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft Azure TLS Issuing CA 06
| Subject | CN=Microsoft Azure TLS Issuing CA 06 O=Microsoft Corporation C=US |
|---|---|
| Issuer | CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US |
| Serial Number | 02:E7:91:71:FB:80:21:E9:3F:E2:D9:83:83:4C:50:C0 |
| Public Key Length | RSA 4096 bits |
| Signature Algorithm | sha384RSA |
| Validity Not Before | Wednesday, July 29, 2020 5:30 AM |
| Validity Not Until | Thursday, June 27, 2024 4:59 PM |
| Subject Key Identifier | D5C1673AC2A39DF477525B59123829E65568BBA5 |
| Authority Key Identifier | KeyID:4e:22:54:20:18:95:e6:e3:6e:e6:0f:fa:fa:b9:12:ed:06:17:8f:39 |
| Thumbprint (SHA-1) | 30E01761AB97E59A06B41EF20AF6F2DE7EF4F7B0 |
| Thumbprint (SHA-256) | 48FF8B494668C752304B48BFE818758987DEF6582E5F09B921F4B60BB3D6A8DD |
| CRL URLs | http://crl3.digicert.com/DigiCertGlobalRootG2.crl http://crl4.digicert.com/DigiCertGlobalRootG2.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft IT TLS CA 1
| Subject | CN=Microsoft IT TLS CA 1 OU=Microsoft IT O=Microsoft Corporation L=Redmond S=Washington C=US |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE |
| Serial Number | 08:B8:7A:50:1B:BE:9C:DA:2D:16:4D:3E:39:51:BF:55 |
| Public Key Length | RSA 4096 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | May 20 12:51:28 2016 UTC |
| Validity Not After | May 20 12:51:28 2024 UTC |
| Subject Key Identifier | 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d |
| Authority Key Identifier | keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | 417E225037FBFAA4F95761D5AE729E1AEA7E3A42 |
| Thumbprint (SHA-256) | 4FF404F02E2CD00188F15D1C00F4B6D1E38B5A395CF85314EAEBA855B6A64B75 |
| Pin (SHA-256) | xjXxgkOYlag7jCtR5DreZm9b61iaIhd+J3+b2LiybIw= |
| CRL URLs | http://crl3.digicert.com/Omniroot2025.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft IT TLS CA 2
| Subject | CN=Microsoft IT TLS CA 2 OU=Microsoft IT O=Microsoft Corporation L=Redmond S=Washington C=US |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE |
| Serial Number | 0F:2C:10:C9:5B:06:C0:93:7F:B8:D4:49:F8:3E:85:69 |
| Public Key Length | RSA 4096 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | May 20 12:51:57 2016 UTC |
| Validity Not After | May 20 12:51:57 2024 UTC |
| Subject Key Identifier | 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da |
| Authority Key Identifier | keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | 54D9D20239080C32316ED9FF980A48988F4ADF2D |
| Thumbprint (SHA-256) | 4E107C981B42ACBE41C01067E16D44DB64814D4193E572317EA04B87C79C475F |
| Pin (SHA-256) | wBdPad95AU7OgLRs0FU/E6ILO1MSCM84kJ9y0H+TT7s= |
| CRL URLs | http://crl3.digicert.com/Omniroot2025.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft IT TLS CA 4
| Subject | CN=Microsoft IT TLS CA 4 OU=Microsoft IT O=Microsoft Corporation L=Redmond S=Washington C=US |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE |
| Serial Number | 0B:6A:B3:B0:3E:B1:A9:F6:C4:60:92:6A:A8:CD:FE:B3 |
| Public Key Length | RSA 4096 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | May 20 12:52:38 2016 UTC |
| Validity Not After | May 20 12:52:38 2024 UTC |
| Subject Key Identifier | 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d |
| Authority Key Identifier | keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | 8A38755D0996823FE8FA3116A277CE446EAC4E99 |
| Thumbprint (SHA-256) | 5FFAC43E0DDC5B4AF2B696F6BC4DB7E91DF314BB8FE0D0713A0B1A7AD2A68FAC |
| Pin (SHA-256) | wUY9EOTJmS7Aj4fDVCu/KeE++mV7FgIcbn4WhMz1I2k= |
| CRL URLs | http://crl3.digicert.com/Omniroot2025.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft IT TLS CA 5
| Subject | CN=Microsoft IT TLS CA 5 OU=Microsoft IT O=Microsoft Corporation L=Redmond S=Washington C=US |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE |
| Serial Number | 08:88:CD:52:5F:19:24:44:4D:14:A5:82:91:DE:B9:52 |
| Public Key Length | RSA 4096 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | May 20 12:53:03 2016 UTC |
| Validity Not After | May 20 12:53:03 2024 UTC |
| Subject Key Identifier | 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65 |
| Authority Key Identifier | keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | AD898AC73DF333EB60AC1F5FC6C4B2219DDB79B7 |
| Thumbprint (SHA-256) | F0EE5914ED94C7252D058B4E39808AEE6FA8F62CF0974FB7D6D2A9DF16E3A87F |
| Pin (SHA-256) | RCbqB+W8nwjznTeP4O6VjqcwdxIgI79eBpnBKRr32gc= |
| CRL URLs | http://crl3.digicert.com/Omniroot2025.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft RSA TLS CA 01
| Subject | CN=Microsoft RSA TLS CA 01 O=Microsoft Corporation C=US |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE |
| Serial Number | 0F:14:96:5F:20:20:69:99:4F:D5:C7:AC:78:89:41:E2 |
| Public Key Length | RSA 4096 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Tuesday, July 21, 2020 4:00 PM |
| Validity Not Until | Tuesday, October 8, 2024 12:00 AM |
| Subject Key Identifier | B5760C3011CEC792424D4CC75C2CC8A90CE80B64 |
| Authority Key Identifier | KeyID:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | 703D7A8F0EBF55AAA59F98EAF4A206004EB2516A |
| Thumbprint (SHA-256) | 04EEEA8E50B4775B3C24797262917EE50002EC4C75B56CDF3EE1C18CFCA5BA52 |
| CRL URLs | http://crl3.digicert.com/Omniroot2025.crl |
| OCSP URLs | http://ocsp.digicert.com |
Microsoft RSA TLS CA 02
| Subject | CN=Microsoft RSA TLS CA 02 O=Microsoft Corporation C=US |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE |
| Serial Number | 0F:A7:47:22:C5:3D:88:C8:0F:58:9E:FB:1F:9D:4A:3A |
| Public Key Length | RSA 4096 bits |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Tuesday, July 21, 2020 4:00 PM |
| Validity Not Until | Tuesday, October 8, 2024 12:00 AM |
| Subject Key Identifier | FF2F7FE106F438F32DED258D98C2FE0EF66CFCFA |
| Authority Key Identifier | KeyID:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | B0C2D2D13CDD56CDAA6AB6E2C04440BE4A429C75 |
| Thumbprint (SHA-256) | 05E4005DB0C382F3BD66B47729E9011577601BF6F7B287E9A52CED710D258346 |
| CRL URLs | http://crl3.digicert.com/Omniroot2025.crl |
| OCSP URLs | http://ocsp.digicert.com |
Symantec Class 3 EV SSL CA - G3
| Subject | CN=Symantec Class 3 EV SSL CA - G3 OU=Symantec Trust Network O=Symantec Corporation C=US |
|---|---|
| Issuer | CN=VeriSign Class 3 Public Primary Certification Authority - G5 OU="(c) 2006 VeriSign, Inc. - For authorized use only" OU=VeriSign Trust Network O="VeriSign, Inc." C=US |
| Subject Alternative Name | Directory Address: CN=SymantecPKI-1-533 |
| Serial Number | 7E:E1:4A:6F:6F:EF:F2:D3:7F:3F:AD:65:4D:3A:DA:B4 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Oct 31 00:00:00 2013 UTC |
| Validity Not After | Oct 30 23:59:59 2023 UTC |
| Subject Key Identifier | 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a |
| Authority Key Identifier | keyid:7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33 |
| Thumbprint (SHA-1) | E3FC0AD84F2F5A83ED6F86F567F8B14B40DCBF12 |
| Thumbprint (SHA-256) | 9E6BC5F9ECC52460E8EDC02C644D1BE1CB9F2316F41DAF3B616A0B2058294B31 |
| Pin (SHA-256) | gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E= |
| CRL URLs | http://s1.symcb.com/pca3-g5.crl |
| OCSP URLs | http://s2.symcb.com |
Symantec Class 3 Secure Server CA - G4
| Subject | CN=Symantec Class 3 Secure Server CA - G4 OU=Symantec Trust Network O=Symantec Corporation C=US |
|---|---|
| Issuer | CN=VeriSign Class 3 Public Primary Certification Authority - G5 OU="(c) 2006 VeriSign, Inc. - For authorized use only" OU=VeriSign Trust Network O="VeriSign, Inc." C=US |
| Subject Alternative Name | Directory Address: CN=SymantecPKI-1-534 |
| Serial Number | 51:3F:B9:74:38:70:B7:34:40:41:8D:30:93:06:99:FF |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Oct 31 00:00:00 2013 UTC |
| Validity Not After | Oct 30 23:59:59 2023 UTC |
| Subject Key Identifier | 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef |
| Authority Key Identifier | keyid:7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33 |
| Thumbprint (SHA-1) | FF67367C5CD4DE4AE18BCCE1D70FDABD7C866135 |
| Thumbprint (SHA-256) | EAE72EB454BF6C3977EBD289E970B2F5282949190093D0D26F98D0F0D6A9CF17 |
| Pin (SHA-256) | 9n0izTnSRF+W4W4JTq51avSXkWhQB8duS2bxVLfzXsY= |
| CRL URLs | http://s1.symcb.com/pca3-g5.crl |
| OCSP URLs | http://s2.symcb.com |
thawte SHA256 SSL CA
| Subject | CN=thawte SHA256 SSL CA O="thawte, Inc." C=US |
|---|---|
| Issuer | CN=thawte Primary Root CA - G3 OU="(c) 2008 thawte, Inc. - For authorized use only" OU=Certification Services Division O="thawte, Inc." C=US |
| Subject Alternative Name | Directory Address: CN=VeriSignMPKI-2-415 |
| Serial Number | 36:34:9E:18:C9:9C:26:69:B6:56:2E:6C:E5:AD:71:32 |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | May 23 00:00:00 2013 UTC |
| Validity Not After | May 22 23:59:59 2023 UTC |
| Subject Key Identifier | 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14 |
| Authority Key Identifier | keyid:ad:6c:aa:94:60:9c:ed:e4:ff:fa:3e:0a:74:2b:63:03:f7:b6:59:bf |
| Thumbprint (SHA-1) | 67D147D5DAB7F28D663CA5B7A9568F087427B9F7 |
| Thumbprint (SHA-256) | 3F3AF9C9CC2C7599EF8F6DD7CA516CFC1797D7D12002254F3BFD0D4D0FE9DE86 |
| Pin (SHA-256) | /36ymPAVaJl3QDyB1lUkVf9GqJNug0R8JJPDN6348p8= |
| CRL URLs | http://crl.thawte.com/ThawtePCA-G3.crl |
| OCSP URLs | http://ocsp.thawte.com |
Verizon Akamai SureServer CA G14-SHA2
| Subject | CN=Verizon Akamai SureServer CA G14-SHA2 OU=Cybertrust O=Verizon Enterprise Solutions L=Amsterdam C=NL |
|---|---|
| Issuer | CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE |
| Serial Number | 07:27:A4:6B |
| Public Key Length | RSA 2048 bits (e 65537) |
| Signature Algorithm | sha256RSA |
| Validity Not Before | Apr 02 14:36:10 2014 UTC |
| Validity Not After | Apr 02 14:35:52 2021 UTC |
| Subject Key Identifier | f8:bd:fa:af:73:77:c6:c7:1b:f9:4b:4d:11:a7:d1:33:af:af:72:11 |
| Authority Key Identifier | keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0 |
| Thumbprint (SHA-1) | 6AD2B04E2196E48BF685752890E811CD2ED60606 |
| Thumbprint (SHA-256) | 7373D219B42547E41BCB752BCBCBE93F592FF6F99C340CE57B73D38C3EC0BA98 |
| Pin (SHA-256) | 8XFPrRr4VxmEIYKUu35QtR3oGbduX1AlrBzaBUHgp7c= |
| AIA URLs | https://cacert.omniroot.com/baltimoreroot.crthttps://cacert.omniroot.com/baltimoreroot.der |
| CRL URLs | http://cdp1.public-trust.com/CRL/Omniroot2025.crl |
| OCSP URLs | http://ocsp.omniroot.com/baltimoreroot |
Additional certificate paths
The following list includes legacy certificates that aren't included above and will be merged with the list above over time.
evsecure-aia.verisign.com
sa.symcb.com
sd.symcb.com
*.omniroot.com
*.verisign.com
*.symcb.com
*.symcd.com
*.verisign.net
*.geotrust.com
*.entrust.net
*.public-trust.com
EVIntl-ocsp.verisign.com
EVSecure-ocsp.verisign.com
isrg.trustid.ocsp.identrust.com
ocsp.digicert.com
ocsp.entrust.net
ocsp.globalsign.com/ExtendedSSLSHA256CACross
ocsp.globalsign.com/rootr1
ocsp.globalsign.com/rootr2
ocsp2.globalsign.com/rootr3
ocsp.int-x3.letsencrypt.org/
ocsp.msocsp.com
ocsp.omniroot.com/baltimoreroot
ocsp2.globalsign.com/gsextendvalsha2g3r3
ocsp2.globalsign.com/gsorganizationvalsha2g2
ocsp2.globalsign.com/gsorganizationvalsha2g3
ocsp2.globalsign.com/rootr3
ocspx.digicert.com
s2.symcb.com
sr.symcd.com
su.symcd.com
vassg142.ocsp.omniroot.com
cdp1.public-trust.com/CRL/Omniroot2025.crl
crl.entrust.net/2048ca.crl
crl.entrust.net/g2ca.crl
crl.entrust.net/level1k.crl
crl.entrust.net/rootca1.crl
crl.globalsign.com/gs/gsextendvalsha2g3r3.crl
crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
crl.globalsign.com/gsorganizationvalsha2g3.crl
crl.globalsign.com/root.crl
crl.globalsign.net/root-r2.crl
crl.globalsign.com/root-r3.crl
crl.globalsign.net/root.crl
crl.identrust.com/DSTROOTCAX3CRL.crl
crl.microsoft.com/pki/mscorp/crl/msitwww1.crl
crl.microsoft.com/pki/mscorp/crl/msitwww2.crl
crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
crl3.digicert.com/DigiCertGlobalRootCA.crl
crl3.digicert.com/sha2-ev-server-g1.crl
crl3.digicert.com/sha2-ha-server-g5.crl
crl3.digicert.com/ssca-sha2-g5.crl
crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl
crl4.digicert.com/DigiCertGlobalRootCA.crl
crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
crl4.digicert.com/sha2-ev-server-g1.crl
crl4.digicert.com/sha2-ha-server-g5.crl
crl4.digicert.com/ssca-sha2-g5.crl
EVIntl-crl.verisign.com/EVIntl2006.crl
EVSecure-crl.verisign.com/pca3-g5.crl
mscrl.microsoft.com/pki/mscorp/crl/msitwww1.crl
mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
s1.symcb.com/pca3-g5.crl
sr.symcb.com/sr.crl
su.symcb.com/su.crl
vassg142.crl.omniroot.com/vassg142.crl
aia.entrust.net/l1k-chain256.cer
apps.identrust.com/roots/dstrootcax3.p7c
https://cacert.a.omniroot.com/vassg142.crt
https://cacert.a.omniroot.com/vassg142.der
https://cacert.omniroot.com/baltimoreroot.crt
https://cacert.omniroot.com/baltimoreroot.der
cacerts.digicert.com/DigiCertCloudServicesCA-1.crt
cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
cert.int-x3.letsencrypt.org/
EVIntl-aia.verisign.com/EVIntl2006.cer
secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt
secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt
secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
sr.symcb.com/sr.crt
su.symcb.com/su.crt
https://www.digicert.com/CACerts/DigiCertGlobalRootCA.crt
https://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.crt
https://www.microsoft.com/pki/mscorp/msitwww1.crt
https://www.microsoft.com/pki/mscorp/msitwww2.crt
Feedback
Submit and view feedback for