@@ -24,7 +24,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
2424
2525- The Serial Number (top string in the table) contains the hexadecimal value of the certificate serial number.
2626- The Thumbprint (bottom string in the table) is the SHA1 thumbprint.
27- - CAs listed in italics are the most recently added CAs.
27+ - For those CAs that must be downloaded over HTTP and not HTTPS, copy the link and paste into the URL field on a new tab.
2828
2929# [ Root and Subordinate CAs list] ( #tab/root-and-subordinate-cas-list )
3030
@@ -44,14 +44,14 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
4444
4545| Certificate Authority | Serial Number<br >Thumbprint |
4646| ---- | ---- |
47- | [ DigiCert Basic OV G2 TLS CN RSA406 SHA256 2022 CA1] ( http://cacerts.digicert.cn /DigiCertBasicOVG2TLSCNRSA4096SHA2562022CA1.crt ) | 0x02361857392757c7ce46336cbc47cda2<br >60707270F2100EE2B771FEC9EFFAD8C9BFFE3358 |
48- | [ DigiCert Basic OV G3 TLS CN ECC P-384 SHA384 2022 CA1] ( http://cacerts.digicert.cn /DigiCertBasicOVG3TLSCNECCP-384SHA3842022CA1.crt ) | 0x01484637b5aacf53c276a96852c2bf32<br >9355B7783FFF5DF69FE98FAF08F7B66CD4B94B99 |
47+ | [ DigiCert Basic OV G2 TLS CN RSA406 SHA256 2022 CA1] ( http://cacerts.digicert.com /DigiCertBasicOVG2TLSCNRSA4096SHA2562022CA1.crt ) | 0x02361857392757c7ce46336cbc47cda2<br >60707270F2100EE2B771FEC9EFFAD8C9BFFE3358 |
48+ | [ DigiCert Basic OV G3 TLS CN ECC P-384 SHA384 2022 CA1] ( http://cacerts.digicert.com /DigiCertBasicOVG3TLSCNECCP-384SHA3842022CA1.crt ) | 0x01484637b5aacf53c276a96852c2bf32<br >9355B7783FFF5DF69FE98FAF08F7B66CD4B94B99 |
4949| [ DigiCert Basic RSA CN CA G2] ( https://cacerts.digicert.com/DigiCertBasicRSACNCAG2.crt ) | 0x02f7e1f982bad009aff47dc95741b2f6<br >4D1FA5D1FB1AC3917C08E43F65015E6AEA571179 |
5050| [ DigiCert Cloud Services CA-1] ( https://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt ) | 0x019ec1c6bd3f597bb20c3338e551d877<br >81B68D6CD2F221F8F534E677523BB236BBA1DC56 |
5151| [ DigiCert Global G2 TLS RSA SHA256 2020 CA1] ( http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt ) | 0cf5bd062b5602f47ab8502c23ccf066<br >1B511ABEAD59C6CE207077C0BF0E0043B1382612 |
5252| [ DigiCert Global G3 TLS ECC SHA384 2020 CA1] ( https://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt ) | 0b00e92d4d6d731fca3059c7cb1e1886<br >9577F91FE86C27D9912129730E8166373FC2EEB8 |
5353| [ DigiCert SHA2 Secure Server CA] ( http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt ) | 0x02742eaa17ca8e21c717bb1ffcfd0ca0<br >626D44E704D1CEABE3BF0D53397464AC8080142C |
54- | [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt ) | 0x0a275fe704d6eecb23d5cd5b4b1a4e04 <br >51E39A8BDB08878C52D6186588A0FA266A69CF28 |
54+ | [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt ) | 07f2f35c87a877af7aefe947993525bd <br >aec13cdd5ea6a3998aec14ac331ad96bedbb770f |
5555| [ DigiCert TLS RSA SHA256 2020 CA1] ( https://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt ) | 0x06d8d904d5584346f68a2fa754227ec4<br >1C58A3A8518E8759BF075B76B750D4F2DF264FCD |
5656| [ GeoTrust Global TLS RSA4096 SHA256 2022 CA1] ( https://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt ) | 0x0f622f6f21c2ff5d521f723a1d47d62d<br >7E6DB7B7584D8CF2003E0931E6CFC41A3A62D3DF |
5757| [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x01529ee8368f0b5d72ba433e2d8ea62d<br >56D955C849887874AA1767810366D90ADF6C8536 |
@@ -93,11 +93,11 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
9393| └ [ DigiCert Basic RSA CN CA G2] ( https://cacerts.digicert.com/DigiCertBasicRSACNCAG2.crt ) | 0x02f7e1f982bad009aff47dc95741b2f6<br >4D1FA5D1FB1AC3917C08E43F65015E6AEA571179 |
9494| └ [ DigiCert Cloud Services CA-1] ( https://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt ) | 0x019ec1c6bd3f597bb20c3338e551d877<br >81B68D6CD2F221F8F534E677523BB236BBA1DC56 |
9595| └ [ DigiCert SHA2 Secure Server CA] ( http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt ) | 0x02742eaa17ca8e21c717bb1ffcfd0ca0<br >626D44E704D1CEABE3BF0D53397464AC8080142C |
96- | └ [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt ) | 0x0a275fe704d6eecb23d5cd5b4b1a4e04 <br >51E39A8BDB08878C52D6186588A0FA266A69CF28 |
96+ | └ [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt ) | 07f2f35c87a877af7aefe947993525bd <br >aec13cdd5ea6a3998aec14ac331ad96bedbb770f |
9797| └ [ DigiCert TLS RSA SHA256 2020 CA1] ( https://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt ) | 0x06d8d904d5584346f68a2fa754227ec4<br >1C58A3A8518E8759BF075B76B750D4F2DF264FCD |
9898| └ [ GeoTrust Global TLS RSA4096 SHA256 2022 CA1] ( https://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt ) | 0x0f622f6f21c2ff5d521f723a1d47d62d<br >7E6DB7B7584D8CF2003E0931E6CFC41A3A62D3DF |
9999| ** [ DigiCert Global Root G2] ( https://cacerts.digicert.com/DigiCertGlobalRootG2.crt ) ** | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
100- | └ [ DigiCert Basic OV G2 TLS CN RSA406 SHA256 2022 CA1] ( http://cacerts.digicert.cn /DigiCertBasicOVG2TLSCNRSA4096SHA2562022CA1.crt ) | 0x02361857392757c7ce46336cbc47cda2<br >60707270F2100EE2B771FEC9EFFAD8C9BFFE3358 |
100+ | └ [ DigiCert Basic OV G2 TLS CN RSA406 SHA256 2022 CA1] ( http://cacerts.digicert.com /DigiCertBasicOVG2TLSCNRSA4096SHA2562022CA1.crt ) | 0x02361857392757c7ce46336cbc47cda2<br >60707270F2100EE2B771FEC9EFFAD8C9BFFE3358 |
101101| └ [ DigiCert Global G2 TLS RSA SHA256 2020 CA1] ( http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt ) | 0x0cf5bd062b5602f47ab8502c23ccf066<br >1B511ABEAD59C6CE207077C0BF0E0043B1382612 |
102102| └ [ Microsoft Azure RSA TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x05196526449a5e3d1a38748f5dcfebcc<br >F9388EA2C9B7D632B66A2B0B406DF1D37D3901F6 |
103103| └ [ Microsoft Azure RSA TLS Issuing CA 04] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt ) | 0x09f96ec295555f24749eaf1e5dced49d<br >BE68D0ADAA2345B48E507320B695D386080E5B25 |
@@ -113,7 +113,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
113113|   ;  ;  ;  ; └ [ Microsoft TLS G2 RSA CA OCSP 14] ( https://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2014.crt ) | 0x33000000127e739347e75be1a1000000000012<br >55D9B33BDC16DDB3B663F1771F96D4324C118073 |
114114|   ;  ;  ;  ; └ [ Microsoft TLS G2 RSA CA OCSP 16] ( https://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2016.crt ) | 0x330000000e42938f25dc51a99b00000000000e<br >27E6663299D340DFE54571CECCEC01BE74495DC6 |
115115| ** [ DigiCert Global Root G3] ( https://cacerts.digicert.com/DigiCertGlobalRootG3.crt ) ** | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
116- | └ [ DigiCert Basic OV G3 TLS CN ECC P-384 SHA384 2022 CA1] ( http://cacerts.digicert.cn /DigiCertBasicOVG3TLSCNECCP-384SHA3842022CA1.crt ) | 0x01484637b5aacf53c276a96852c2bf32<br >9355B7783FFF5DF69FE98FAF08F7B66CD4B94B99 |
116+ | └ [ DigiCert Basic OV G3 TLS CN ECC P-384 SHA384 2022 CA1] ( http://cacerts.digicert.com /DigiCertBasicOVG3TLSCNECCP-384SHA3842022CA1.crt ) | 0x01484637b5aacf53c276a96852c2bf32<br >9355B7783FFF5DF69FE98FAF08F7B66CD4B94B99 |
117117| └ [ DigiCert Global G3 TLS ECC SHA384 2020 CA1] ( https://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt ) | 0x0b00e92d4d6d731fca3059c7cb1e1886<br >9577F91FE86C27D9912129730E8166373FC2EEB8 |
118118| └ [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x01529ee8368f0b5d72ba433e2d8ea62d<br >56D955C849887874AA1767810366D90ADF6C8536 |
119119| └ [ Microsoft Azure ECC TLS Issuing CA 03] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003322a2579b5e698bcc000000000033<br >91503BE7BF74E2A10AA078B48B71C3477175FEC3 |
0 commit comments