← Microsoft Corporation in CCADB Browser
CA Owner · United States of America
Microsoft Corporation
Documentation
- Document Repository
- https://www.microsoft.com/pkiops/docs/repository.htm
- Policy Documentation
- Documents are in English. Microsoft's CP applies to both their external (publicly trusted) CA operations as well as their internal (not publicly trusted) CA operations. The Microsoft PKI Services CPS (Microsoft_PKI_Services_CPS) is for the external (publicly trusted) CA operations, so is the one governing this root certificate. The Microsoft PKI Services Corporate CPS (Microsoft_PKI_Services_Corporate-CPS) governs the private PKI of Microsoft PKI Services, so not relevant to this root certificate.
Problem Reporting
https://www.microsoft.com/pkiops/docs/repository.htm
Mozilla CA Program — Known Bugzilla Cases (60)
Microsoft PKI Services: Failure to Update Full Incident Report within 14 days of discovering new root cause
Microsoft PKI Services: Misissuance detected by PKIMetal
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
Microsoft PKI Services: Failure to publish Full Incident Report for Bugzilla 2021175 within 14 days
Microsoft PKI Services: Failure to update action item status within 3 days
Microsoft PKI Services: Improper Disclosure of CRLs – Protocol Scheme
Microsoft PKI Services: Improper Disclosure of CRLs – Does Not Match CA Subject
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – New CAs
Microsoft PKI Services: Failure to report within 72 hrs - Sample Site Certs Expired
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – Existing CAs
Microsoft PKI Services: Sample Site Certificates expired
Microsoft PKI Services: Improper Disclosure of CRL
Microsoft PKI Services: OCSP Non-Compliance
Microsoft: improper disclosure of CRL
Microsoft PKI Services: End Entity Certificate Mis-issuance against CPS (BasicConstraints)
Microsoft PKI Services: Pre-Sign Linting Validation did not occur in ICA creation
Microsoft PKI Services: Incorrect Revocation Reason Code
Microsoft PKI Services: Failure to Revoke in 5 Days for 1962829
Microsoft Audit Documents
Microsoft PKI Services: Subscriber certificate change made that was not compliant with CPS
Microsoft PKI Services: Policy document bug
Microsoft PKI Services: Subject Key Identifiers in Some Subscriber Certificates Do Not Comply with RFC 5280
Microsoft PKI Services - Documents
Microsoft PKI Services: Vulnerability Management Exception Tracking
Microsoft PKI Services: Invalid Email Address for CPRs
Microsoft PKI Services: CA Certificates not published in DER Encoded Format
Microsoft PKI Services: OCSP Responder does not know a Certificate
Microsoft PKI Services: 3-Month Access Review Process Failure
Microsoft PKI Services: Trusted Role Control Failure
Microsoft PKI Services: CRL Publication Failures
Microsoft PKI Services: Failure to modify policy documents within 365 days
Microsoft - Request for access to CCADB API
Microsoft PKI Services: "unknown" OCSP response for issued certificates
Microsoft PKI Services: Failure to disclose Revocation of Intermediate CAs within 7 Days
Microsoft PKI Services: Unrevoked 4 intermediate certificates
Microsoft PKI Services: Overdue Audit Reports 2021
Documents for Microsoft PKI Services intermediate certificates
Microsoft PKI Services: Malformed ICAs (Key Usage Malformed)
Extend Root Inclusion Cases to Microsoft
Provide APIs and OAuth for Microsoft to automate their root store updates to CCADB
Update Microsoft field names and automate filling in the EV checkboxes based on the Microsoft Policy OIDs
Microsoft PKI Services: Malformed ICAs (missing certificate policy extensions)
Microsoft PKI Services: Certificate Mis-Issuance, DNSName is not FQDN, Preferred Name Syntax
Microsoft PKI Services: Underscore in SAN
Microsoft PKI Services: Failure to disclose Unconstrained Intermediate within 7 Days
Microsoft PKI Services: Policy Documentation, Failure to update Domain Validation Method
Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period
Microsoft PKI Services: DV certificate issued with OV fields
Microsoft PKI Services: Certificate Mis-Issuance, DNSNames must have a valid TLD
Microsoft PKI Services: Firewall log data retention
Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence
Microsoft PKI Services: Certificate Mis-Issuance, Locality Missing
Microsoft DSRE PKI: OCSP responders found to respond signed by the default CA when passed an invalid issuer in request
Microsoft DSRE PKI: problem reporting e-mail in CPS does not work
Microsoft PKI Services: Loss of Archived Firewall logs from Retention Store
Microsoft PKI Services: Null Character Bug and Microsoft Root CAs
Microsoft PKI Services: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy
Microsoft Audit Documents
Add 2 Microsoft Roots to Mozilla's Root Store
Microsoft DSRE PKI: Microsoft shares wildcard certificates among cloud instances
Certificates (116)
Microsoft Authenticode(tm) Root Authority
Microsoft Corporation
Microsoft ECC Root Certificate Authority 2017
Microsoft ECC Root Certificate Authority 2017
Microsoft EV ECC Root Certificate Authority 2017
Microsoft EV ECC Root Certificate Authority 2017
Microsoft EV RSA Root Certificate Authority 2017
Microsoft EV RSA Root Certificate Authority 2017
Microsoft Identity Verification Root Certificate Authority 2020
Microsoft Root Authority
Microsoft Root Certificate Authority
Microsoft RSA Root Certificate Authority 2017
Microsoft RSA Root Certificate Authority 2017
Microsoft TLS ECC Root G2
Microsoft TLS RSA Root G2
Microsoft Azure ECC TLS Issuing CA 01
Microsoft Azure ECC TLS Issuing CA 01
Microsoft Azure ECC TLS Issuing CA 02
Microsoft Azure ECC TLS Issuing CA 02
Microsoft Azure ECC TLS Issuing CA 03
Microsoft Azure ECC TLS Issuing CA 04
Microsoft Azure ECC TLS Issuing CA 05
Microsoft Azure ECC TLS Issuing CA 05
Microsoft Azure ECC TLS Issuing CA 06
Microsoft Azure ECC TLS Issuing CA 06
Microsoft Azure ECC TLS Issuing CA 07
Microsoft Azure ECC TLS Issuing CA 08
Microsoft Azure RSA TLS Issuing CA 03
Microsoft Azure RSA TLS Issuing CA 04
Microsoft Azure RSA TLS Issuing CA 07
Microsoft Azure RSA TLS Issuing CA 08
Microsoft Azure TLS Issuing CA 01
Microsoft Azure TLS Issuing CA 01
Microsoft Azure TLS Issuing CA 02
Microsoft Azure TLS Issuing CA 02
Microsoft Azure TLS Issuing CA 05
Microsoft Azure TLS Issuing CA 05
Microsoft Azure TLS Issuing CA 06
Microsoft Azure TLS Issuing CA 06
Microsoft ECC Server PCA 2018
Microsoft ECC TLS Issuing AOC CA 01
Microsoft ECC TLS Issuing AOC CA 01
Microsoft ECC TLS Issuing AOC CA 02
Microsoft ECC TLS Issuing AOC CA 02
Microsoft ECC TLS Issuing EOC CA 01
Microsoft ECC TLS Issuing EOC CA 01
Microsoft ECC TLS Issuing EOC CA 02
Microsoft ECC TLS Issuing EOC CA 02
Microsoft EV ECC Server PCA 2018
Microsoft EV Server PCA 2018
Microsoft RSA TLS Issuing AOC CA 01
Microsoft RSA TLS Issuing AOC CA 01
Microsoft RSA TLS Issuing AOC CA 01
Microsoft RSA TLS Issuing AOC CA 02
Microsoft RSA TLS Issuing AOC CA 02
Microsoft RSA TLS Issuing AOC CA 02
Microsoft RSA TLS Issuing EOC CA 01
Microsoft RSA TLS Issuing EOC CA 01
Microsoft RSA TLS Issuing EOC CA 01
Microsoft RSA TLS Issuing EOC CA 02
Microsoft RSA TLS Issuing EOC CA 02
Microsoft RSA TLS Issuing EOC CA 02
Microsoft Server PCA 2018
Microsoft TLS ECC EV Issuing CA 01
Microsoft TLS ECC EV Issuing CA 02
Microsoft TLS ECC EV Issuing CA 02
Microsoft TLS ECC EV Issuing CA 02
Microsoft TLS ECC EV Issuing CA 05
Microsoft TLS ECC EV Issuing CA 06
Microsoft TLS ECC EV Issuing CA 06
Microsoft TLS ECC EV Issuing CA 06
Microsoft TLS ECC Issuing CA 01
Microsoft TLS ECC Issuing CA 02
Microsoft TLS ECC Issuing CA 02
Microsoft TLS ECC Issuing CA 05
Microsoft TLS ECC Issuing CA 06
Microsoft TLS ECC Issuing CA 06
Microsoft TLS EV Issuing CA 01
Microsoft TLS EV Issuing CA 02
Microsoft TLS EV Issuing CA 02
Microsoft TLS EV Issuing CA 05
Microsoft TLS EV Issuing CA 06
Microsoft TLS EV Issuing CA 06
Microsoft TLS G1 ECC CA 01
Microsoft TLS G1 ECC CA 02
Microsoft TLS G1 RSA CA 01
Microsoft TLS G1 RSA CA 02
Microsoft TLS G1 RSA CA 03
Microsoft TLS G1 RSA CA 04
Microsoft TLS G2 ECC CA OCSP 02
Microsoft TLS G2 ECC CA OCSP 04
Microsoft TLS G2 ECC CA OCSP 06
Microsoft TLS G2 ECC CA OCSP 08
Microsoft TLS G2 RSA CA OCSP 02
Microsoft TLS G2 RSA CA OCSP 02
Microsoft TLS G2 RSA CA OCSP 04
Microsoft TLS G2 RSA CA OCSP 04
Microsoft TLS G2 RSA CA OCSP 06
Microsoft TLS G2 RSA CA OCSP 06
Microsoft TLS G2 RSA CA OCSP 08
Microsoft TLS G2 RSA CA OCSP 10
Microsoft TLS G2 RSA CA OCSP 10
Microsoft TLS G2 RSA CA OCSP 12
Microsoft TLS G2 RSA CA OCSP 14
Microsoft TLS G2 RSA CA OCSP 16
Microsoft TLS G2 RSA CA OCSP 16
Microsoft TLS Issuing CA 01
Microsoft TLS Issuing CA 02
Microsoft TLS Issuing CA 02
Microsoft TLS Issuing CA 03
Microsoft TLS Issuing CA 03
Microsoft TLS Issuing CA 05
Microsoft TLS Issuing CA 06
Microsoft TLS Issuing CA 06
Microsoft TLS Issuing CA 07
Microsoft TLS Issuing CA 07