@@ -6,7 +6,7 @@ ms.service: security
66ms.subservice : security-fundamentals
77ms.custom : devx-track-extended-java
88ms.topic : conceptual
9- ms.date : 07/17 /2023
9+ ms.date : 11/27 /2023
1010ms.author : sarahlipsey
1111author : shlipsey3
1212manager : amycolannino
@@ -36,7 +36,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
3636| [ DigiCert Global Root G2] ( https://cacerts.digicert.com/DigiCertGlobalRootG2.crt ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
3737| [ DigiCert Global Root G3] ( https://cacerts.digicert.com/DigiCertGlobalRootG3.crt ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
3838| [ Microsoft ECC Root Certificate Authority 2017] ( https://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
39- | [ Microsoft RSA Root Certificate Authority 2017] ( https://www.microsoft.com/pkiops/certs/archived/ Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt ) | 29c87039f4dbfdb94dbcda6ca792836b <br >ee68c3e94ab5d55eb9395116424e25b0cadd9009 |
39+ | [ Microsoft RSA Root Certificate Authority 2017] ( https://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt ) | 0x1ed397095fd8b4b347701eaabe7f45b3 <br >73a5e64a3bff8316ff0edccc618a906e4eae4d74 |
4040
4141### Subordinate Certificate Authorities
4242
@@ -98,18 +98,18 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
9898
9999| Certificate Authority | Serial Number<br >Thumbprint |
100100| ---- | ---- |
101- | [ ** Baltimore CyberTrust Root** ] ( https://crt.sh/?d=76 ) | 020000b9<br >d4de20d05e66fc53fe1a50882c78db2852cae474 |
101+ | [ ** Baltimore CyberTrust Root** ] ( https://cacerts.digicert.com/BaltimoreCyberTrustRoot.crt ) | 020000b9<br >d4de20d05e66fc53fe1a50882c78db2852cae474 |
102102| └ [ Microsoft RSA TLS CA 01] ( https://crt.sh/?d=3124375355 ) | 0x0f14965f202069994fd5c7ac788941e2<br >703D7A8F0EBF55AAA59F98EAF4A206004EB2516A |
103103| └ [ Microsoft RSA TLS CA 02] ( https://crt.sh/?d=3124375356 ) | 0x0fa74722c53d88c80f589efb1f9d4a3a<br >B0C2D2D13CDD56CDAA6AB6E2C04440BE4A429C75 |
104- | [ ** DigiCert Global Root CA** ] ( https://crt.sh/?d=853428 ) | 0x083be056904246b1a1756ac95991c74a<br >A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 |
104+ | [ ** DigiCert Global Root CA** ] ( https://cacerts.digicert.com/DigiCertGlobalRootCA.crt ) | 0x083be056904246b1a1756ac95991c74a<br >A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 |
105105| └ [ DigiCert Basic RSA CN CA G2] ( https://crt.sh/?d=2545289014 ) | 0x02f7e1f982bad009aff47dc95741b2f6<br >4D1FA5D1FB1AC3917C08E43F65015E6AEA571179 |
106106| └ [ DigiCert Cloud Services CA-1] ( https://crt.sh/?d=12624881 ) | 0x019ec1c6bd3f597bb20c3338e551d877<br >81B68D6CD2F221F8F534E677523BB236BBA1DC56 |
107107| └ [ DigiCert SHA2 Secure Server CA] ( https://crt.sh/?d=3422153451 ) | 0x02742eaa17ca8e21c717bb1ffcfd0ca0<br >626D44E704D1CEABE3BF0D53397464AC8080142C |
108108| └ [ DigiCert TLS Hybrid ECC SHA384 2020 CA1] ( https://crt.sh/?d=3422153452 ) | 0x0a275fe704d6eecb23d5cd5b4b1a4e04<br >51E39A8BDB08878C52D6186588A0FA266A69CF28 |
109109| └ [ DigiCert TLS RSA SHA256 2020 CA1] ( https://crt.sh/?d=4385364571 ) | 0x06d8d904d5584346f68a2fa754227ec4<br >1C58A3A8518E8759BF075B76B750D4F2DF264FCD |
110110| └ [ GeoTrust Global TLS RSA4096 SHA256 2022 CA1] ( https://crt.sh/?d=6670931375 ) | 0x0f622f6f21c2ff5d521f723a1d47d62d<br >7E6DB7B7584D8CF2003E0931E6CFC41A3A62D3DF |
111111| └ [ GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1] ( https://crt.sh/?d=3112858728 ) | 0x0c08966535b942a9735265e4f97540bc<br >2F7AA2D86056A8775796F798C481A079E538E004 |
112- | [ ** DigiCert Global Root G2** ] ( https://crt.sh/?d=8656329 ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
112+ | [ ** DigiCert Global Root G2** ] ( https://cacerts.digicert.com/DigiCertGlobalRootG2.crt ) | 0x033af1e6a711a9a0bb2864b11d09fae5<br >DF3C24F9BFD666761B268073FE06D1CC8D4F82A4 |
113113| └ [ Microsoft Azure TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.cer ) | 0x0aafa6c5ca63c45141ea3be1f7c75317<br >2F2877C5D778C31E0F29C7E371DF5471BD673173 |
114114| └ [ Microsoft Azure TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.cer ) | 0x0c6ae97cced599838690a00a9ea53214<br >E7EEA674CA718E3BEFD90858E09F8372AD0AE2AA |
115115| └ [ * Microsoft Azure RSA TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x05196526449a5e3d1a38748f5dcfebcc<br >F9388EA2C9B7D632B66A2B0B406DF1D37D3901F6 |
@@ -118,7 +118,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
118118| └ [ * Microsoft Azure RSA TLS Issuing CA 08* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0efb7e547edf0ff1069aee57696d7ba0<br >31600991ED5FEC63D355A5484A6DCC787EAD89BC |
119119| └ [ Microsoft Azure TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.cer ) | 0x0d7bede97d8209967a52631b8bdd18bd<br >6C3AF02E7F269AA73AFD0EFF2A88A4A1F04ED1E5 |
120120| └ [ Microsoft Azure TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.cer ) | 0x02e79171fb8021e93fe2d983834c50c0<br >30E01761AB97E59A06B41EF20AF6F2DE7EF4F7B0 |
121- | [ ** DigiCert Global Root G3** ] ( https://crt.sh/?d=8568700 ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
121+ | [ ** DigiCert Global Root G3** ] ( https://cacerts.digicert.com/DigiCertGlobalRootG3.crt ) | 0x055556bcf25ea43535c3a40fd5ab4572<br >7E04DE896A3E666D00E687D33FFAD93BE83D349E |
122122| └ [ Microsoft Azure ECC TLS Issuing CA 01] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2001.cer ) | 0x09dc42a5f574ff3a389ee06d5d4de440<br >92503D0D74A7D3708197B6EE13082D52117A6AB0 |
123123| └ [ Microsoft Azure ECC TLS Issuing CA 02] ( https://www.microsoft.com/pki/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2002.cer ) | 0x0e8dbe5ea610e6cbb569c736f6d7004b<br >1E981CCDDC69102A45C6693EE84389C3CF2329F1 |
124124| └ [ * Microsoft Azure ECC TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003%20-%20xsign.crt ) | 0x01529ee8368f0b5d72ba433e2d8ea62d<br >56D955C849887874AA1767810366D90ADF6C8536 |
@@ -127,7 +127,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
127127| └ [ * Microsoft Azure ECC TLS Issuing CA 08* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2008%20-%20xsign.crt ) | 0x0ef2e5d83681520255e92c608fbc2ff4<br >716DF84638AC8E6EEBE64416C8DD38C2A25F6630 |
128128| └ [ Microsoft Azure ECC TLS Issuing CA 05] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2005.cer ) | 0x0ce59c30fd7a83532e2d0146b332f965<br >C6363570AF8303CDF31C1D5AD81E19DBFE172531 |
129129| └ [ Microsoft Azure ECC TLS Issuing CA 06] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2006.cer ) | 0x066e79cd7624c63130c77abeb6a8bb94<br >7365ADAEDFEA4909C1BAADBAB68719AD0C381163 |
130- | [ ** Microsoft ECC Root Certificate Authority 2017** ] ( https://crt.sh/?d=2565145421 ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
130+ | [ ** Microsoft ECC Root Certificate Authority 2017** ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt ) | 0x66f23daf87de8bb14aea0c573101c2ec<br >999A64C37FF47D9FAB95F14769891460EEC4C3C5 |
131131| └ [ Microsoft Azure ECC TLS Issuing CA 01] ( https://crt.sh/?d=2616305805 ) | 0x330000001aa9564f44321c54b900000000001a<br >CDA57423EC5E7192901CA1BF6169DBE48E8D1268 |
132132| └ [ Microsoft Azure ECC TLS Issuing CA 02] ( https://crt.sh/?d=2616326233 ) | 0x330000001b498d6736ed5612c200000000001b<br >489FF5765030EB28342477693EB183A4DED4D2A6 |
133133| └ [ * Microsoft Azure ECC TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20ECC%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003322a2579b5e698bcc000000000033<br >91503BE7BF74E2A10AA078B48B71C3477175FEC3 |
@@ -140,7 +140,7 @@ Any entity trying to access Microsoft Entra identity services via the TLS/SSL pr
140140| └ [ Microsoft ECC TLS Issuing AOC CA 02] ( https://crt.sh/?d=4814787086 ) | 33000000290f8a6222ef6a5695000000000029<br >3709cd92105d074349d00ea8327f7d5303d729c8 |
141141| └ [ Microsoft ECC TLS Issuing EOC CA 01] ( https://crt.sh/?d=4814787088 ) | 330000002a2d006485fdacbfeb00000000002a<br >5fa13b879b2ad1b12e69d476e6cad90d01013b46 |
142142| └ [ Microsoft ECC TLS Issuing EOC CA 02] ( https://crt.sh/?d=4814787085 ) | 330000002be6902838672b667900000000002b<br >58a1d8b1056571d32be6a7c77ed27f73081d6e7a |
143- | [ ** Microsoft RSA Root Certificate Authority 2017** ] ( https://crt.sh/?id=2565151295 ) | 0x1ed397095fd8b4b347701eaabe7f45b3<br >73A5E64A3BFF8316FF0EDCCC618A906E4EAE4D74 |
143+ | [ ** Microsoft RSA Root Certificate Authority 2017** ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt ) | 0x1ed397095fd8b4b347701eaabe7f45b3<br >73A5E64A3BFF8316FF0EDCCC618A906E4EAE4D74 |
144144| └ [ * Microsoft Azure RSA TLS Issuing CA 03* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crt ) | 0x330000003968ea517d8a7e30ce000000000039<br >37461AACFA5970F7F2D2BAC5A659B53B72541C68 |
145145| └ [ * Microsoft Azure RSA TLS Issuing CA 04* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crt ) | 0x330000003cd7cb44ee579961d000000000003c<br >7304022CA8A9FF7E3E0C1242E0110E643822C45E |
146146| └ [ * Microsoft Azure RSA TLS Issuing CA 07* ] ( https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crt ) | 0x330000003bf980b0c83783431700000000003b<br >0E5F41B697DAADD808BF55AD080350A2A5DFCA93 |
0 commit comments