← CCADB Browser
Export Audit Dump
CA Owner · United States of America
Microsoft Corporation
Identity
- CountryCCADBA text value provided by the CA Owner representing the physical address of their organization.
- 🇺🇸 United States of America
Documentation
- Policy DocsCCADBNotes about the documentation, such as which language the documents are in, or additional documents that need to be listed, as configured by the CA Owner.
- Documents are in English. Microsoft's CP applies to both their external (publicly trusted) CA operations as well as their internal (not publicly trusted) CA operations. The Microsoft PKI Services CPS (Microsoft_PKI_Services_CPS) is for the external (publicly trusted) CA operations, so is the one governing this root certificate. The Microsoft PKI Services Corporate CPS (Microsoft_PKI_Services_Corporate-CPS) governs the private PKI of Microsoft PKI Services, so not relevant to this root certificate.
- Doc RepositoryCCADBThe URL to the document repository pertaining to this certificate, as configured by the CA Owner.
Problem ReportingCCADBCCADB-published contact mechanisms for certificate problem reports and CA incident reports.
CCADB-published contact mechanisms for certificate problem reports and CA incident reports.
Microsoft Corporation
Mozilla CA Program — Known Bugzilla Cases (60)
Microsoft PKI Services: Failure to Update Full Incident Report within 14 days of discovering new root cause
AI Summary
Microsoft PKI Services: Misissuance detected by PKIMetal
AI Summary
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
AI Summary
Microsoft PKI Services: Failure to publish Full Incident Report for Bugzilla 2021175 within 14 days
AI Summary
Microsoft PKI Services: Failure to update action item status within 3 days
AI Summary
Microsoft PKI Services: Improper Disclosure of CRLs – Protocol Scheme
AI Summary
Microsoft PKI Services: Improper Disclosure of CRLs – Does Not Match CA Subject
AI Summary
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – New CAs
AI Summary
Microsoft PKI Services: Failure to report within 72 hrs - Sample Site Certs Expired
AI Summary
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – Existing CAs
AI Summary
Microsoft PKI Services: Sample Site Certificates expired
AI Summary
Microsoft PKI Services: Improper Disclosure of CRL
AI Summary
Microsoft PKI Services: OCSP Non-Compliance
AI Summary
Microsoft: improper disclosure of CRL
AI Summary
Microsoft PKI Services: End Entity Certificate Mis-issuance against CPS (BasicConstraints)
AI Summary
Microsoft PKI Services: Pre-Sign Linting Validation did not occur in ICA creation
AI Summary
Microsoft PKI Services: Incorrect Revocation Reason Code
AI Summary
Microsoft PKI Services: Failure to Revoke in 5 Days for 1962829
AI Summary
Microsoft Audit Documents
AI Summary
Microsoft PKI Services: Subscriber certificate change made that was not compliant with CPS
AI Summary
Microsoft PKI Services: Policy document bug
AI Summary
Microsoft PKI Services: Subject Key Identifiers in Some Subscriber Certificates Do Not Comply with RFC 5280
AI Summary
Microsoft PKI Services - Documents
AI Summary
Microsoft PKI Services: Vulnerability Management Exception Tracking
AI Summary
Microsoft PKI Services: Invalid Email Address for CPRs
AI Summary
Microsoft PKI Services: CA Certificates not published in DER Encoded Format
AI Summary
Microsoft PKI Services: OCSP Responder does not know a Certificate
AI Summary
Microsoft PKI Services: 3-Month Access Review Process Failure
AI Summary
Microsoft PKI Services: Trusted Role Control Failure
AI Summary
Microsoft PKI Services: CRL Publication Failures
AI Summary
Microsoft PKI Services: Failure to modify policy documents within 365 days
AI Summary
Microsoft - Request for access to CCADB API
AI Summary
Microsoft PKI Services: "unknown" OCSP response for issued certificates
AI Summary
Microsoft PKI Services: Failure to disclose Revocation of Intermediate CAs within 7 Days
AI Summary
Microsoft PKI Services: Unrevoked 4 intermediate certificates
AI Summary
Microsoft PKI Services: Overdue Audit Reports 2021
AI Summary
Documents for Microsoft PKI Services intermediate certificates
AI Summary
Microsoft PKI Services: Malformed ICAs (Key Usage Malformed)
AI Summary
Extend Root Inclusion Cases to Microsoft
AI Summary
Provide APIs and OAuth for Microsoft to automate their root store updates to CCADB
AI Summary
Update Microsoft field names and automate filling in the EV checkboxes based on the Microsoft Policy OIDs
AI Summary
Microsoft PKI Services: Malformed ICAs (missing certificate policy extensions)
AI Summary
Microsoft PKI Services: Certificate Mis-Issuance, DNSName is not FQDN, Preferred Name Syntax
AI Summary
Microsoft PKI Services: Underscore in SAN
AI Summary
Microsoft PKI Services: Failure to disclose Unconstrained Intermediate within 7 Days
AI Summary
Microsoft PKI Services: Policy Documentation, Failure to update Domain Validation Method
AI Summary
Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period
AI Summary
Microsoft PKI Services: DV certificate issued with OV fields
AI Summary
Microsoft PKI Services: Certificate Mis-Issuance, DNSNames must have a valid TLD
AI Summary
Microsoft PKI Services: Firewall log data retention
AI Summary
Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence
AI Summary
Microsoft PKI Services: Certificate Mis-Issuance, Locality Missing
AI Summary
Microsoft DSRE PKI: OCSP responders found to respond signed by the default CA when passed an invalid issuer in request
AI Summary
Microsoft DSRE PKI: problem reporting e-mail in CPS does not work
AI Summary
Microsoft PKI Services: Loss of Archived Firewall logs from Retention Store
AI Summary
Microsoft PKI Services: Null Character Bug and Microsoft Root CAs
AI Summary
Microsoft PKI Services: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy
AI Summary
Microsoft Audit Documents
AI Summary
Add 2 Microsoft Roots to Mozilla's Root Store
AI Summary
Microsoft DSRE PKI: Microsoft shares wildcard certificates among cloud instances
AI Summary
Certificates (116)
| Certificate | Type | Trust | Source agreement | Capabilities | Valid Until | Actions |
|---|---|---|---|---|---|---|
| Root | — | 1999-12-31 | ||||
|
Microsoft Corporation
Expired |
Root | — | 1999-12-30 | |||
| Root | ✓ | 2042-07-18 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | i | 2030-08-28 | ||||
| Intermediate | i | 2030-08-28 | ||||
| Root | — | 2042-07-26 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
|
Microsoft ECC Server PCA 2018
Revoked |
Intermediate | — | 2033-02-28 | |||
|
Microsoft TLS ECC Issuing CA 01
Revoked |
Intermediate | — | 2023-05-31 | |||
|
Microsoft TLS ECC Issuing CA 02
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS ECC Issuing CA 02
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS ECC Issuing CA 05
Revoked |
Intermediate | — | 2023-05-31 | |||
|
Microsoft TLS ECC Issuing CA 06
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS ECC Issuing CA 06
Revoked |
Intermediate | — | 2024-05-14 | |||
| Root | 2042-07-26 | |||||
|
Microsoft EV ECC Server PCA 2018
Revoked |
Intermediate | — | 2033-02-28 | |||
| Intermediate | — | 2023-05-31 | ||||
| Intermediate | — | 2024-06-11 | ||||
| Intermediate | — | 2024-05-14 | ||||
| Intermediate | — | 2023-05-31 | ||||
| Intermediate | — | 2024-06-11 | ||||
| Intermediate | — | 2024-05-14 | ||||
| Root | — | 2042-07-18 | ||||
| Root | 2042-07-26 | |||||
|
Microsoft EV Server PCA 2018
Revoked |
Intermediate | — | 2033-02-28 | |||
| Intermediate | — | 2024-05-14 | ||||
| Intermediate | — | 2024-05-14 | ||||
|
Microsoft TLS EV Issuing CA 01
Revoked |
Intermediate | — | 2023-05-31 | |||
|
Microsoft TLS EV Issuing CA 02
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS EV Issuing CA 02
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS EV Issuing CA 05
Revoked |
Intermediate | — | 2023-05-31 | |||
|
Microsoft TLS EV Issuing CA 06
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS EV Issuing CA 06
Revoked |
Intermediate | — | 2024-05-14 | |||
| Root | — | 2042-07-18 | ||||
| Root | ✓ | 2045-04-16 | ||||
|
Microsoft Root Authority
Expired |
Root | — | 2020-12-31 | |||
| Root | — | 2021-05-09 | ||||
| Root | — | 2042-07-26 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
|
Microsoft Server PCA 2018
Revoked |
Intermediate | — | 2033-02-28 | |||
|
Microsoft TLS Issuing CA 01
Revoked |
Intermediate | — | 2023-05-31 | |||
|
Microsoft TLS Issuing CA 02
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 02
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 03
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 03
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 05
Revoked |
Intermediate | — | 2023-05-31 | |||
|
Microsoft TLS Issuing CA 06
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 06
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 07
Revoked |
Intermediate | — | 2024-05-14 | |||
|
Microsoft TLS Issuing CA 07
Revoked |
Intermediate | — | 2024-05-14 | |||
| Root | ✓ | 2042-07-18 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | i | 2028-05-25 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2024-06-27 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-03-11 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | — | 2026-06-24 | ||||
| Intermediate | i | 2030-08-28 | ||||
| Intermediate | i | 2030-08-28 | ||||
| Intermediate | i | 2030-08-28 | ||||
| Intermediate | i | 2030-08-28 | ||||
| Root | — | 2040-04-10 | ||||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Root | — | 2040-04-10 | ||||
| Intermediate | i | — | 2029-06-03 | |||
|
Microsoft TLS G2 RSA CA OCSP 02
Revoked |
Intermediate | — | 2029-06-03 | |||
|
Microsoft TLS G2 RSA CA OCSP 04
Revoked |
Intermediate | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
|
Microsoft TLS G2 RSA CA OCSP 06
Revoked |
Intermediate | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
|
Microsoft TLS G2 RSA CA OCSP 10
Revoked |
Intermediate | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
| Intermediate | i | — | 2029-06-03 | |||
|
Microsoft TLS G2 RSA CA OCSP 16
Revoked |
Intermediate | — | 2029-06-03 |