Office 365 Certificate Chains

Office 365 leverages a number of different certificate providers. The following describes the complete list of known Office 365 root certificates that customers may encounter when accessing Office 365. For information on the certificates you may need to install in your own infrastructure, see Plan for third-party SSL certificates. The following certificate information applies to all worldwide and national cloud instances of Office 365.

Certificate type

P7b download

CRL Endpoints

OCSP Endpoints

AIA Endpoints

Publicly Trusted Root Certificates​

Office 365 Root Certificate Bundle (P7B)​​

cert.startcom.org

crl.globalsign.net

crl.startcom.org

www.d-trust.net

N/A

N/A

Publicly Trusted Intermediate Certificates​

Office 365 Intermediate Certificate Bundle​ (​P7B)​​

cdp1.public-trust.com

crl.cnnic.cn

crl.entrust.net

crl.globalsign.com

crl.globalsign.net

crl.identrust.com

crl.startcom.com

crl.thawte.com

crl3.digicert.com

crl4.digicert.com

crls1.wosign.com

s1.symcb.com

www.d-trust.net

isrg.trustid.ocsp.identrust.com

ocsp.digicert.com

ocsp.entrust.net

ocsp.globalsign.com

ocsp.omniroot.com

ocsp.startssl.com

ocsp.thawte.com

ocsp1.wosign.com

ocsp2.globalsign.com

ocspcnnicroot.cnnic.cn

root-c3-ca2-2009.ocsp.d-trust.net

root-c3-ca2-ev-2009.ocsp.d-trust.net

s2.symcb.com

aia.startssl.com

aia1.wosign.com

apps.identrust.com

cacert.omniroot.com

www.cnnic.cn

Expand the root and intermediate sections below to see additional details about the certificate providers.

Baltimore Cybe​rTrust Root

Subject

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

02:00:00:B9

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

May 12 18:46:00 2000 UTC

Validity Not After

May 12 23:59:00 2025 UTC

Subject Key Identifier

e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

D4DE20D05E66FC53FE1A50882C78DB2852CAE474​

Thumbprint (SHA-256)

16AF57A9F676B0AB126095AA5EBADEF22AB31119D644AC95CD4B93DBF3F26AEB

Pin (SHA-256)

Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o=

CNNIC ROOT

Subject

CN=CNNIC ROOT

O=CNNIC

C=CN

Serial Number

49:33:00:01

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Apr 16 07:09:14 2007 UTC

Validity Not After

Apr 16 07:09:14 2027 UTC

Subject Key Identifier

65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11

Authority Key Identifier

keyid:65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11​

Thumbprint (SHA-1)

8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F​

Thumbprint (SHA-256)

E28393773DA845A679F2080CC7FB44A3B7A1C3792CB7EB7729FDCB6A8D99AEA7

Pin (SHA-256)

H0IkzshPyZztiB/2/P0+IfjFGcVHqmpd094kcwLOUNE=

DigiCert Global Root CA

Subject

CN=DigiCert Global Root CA

OU=www.digicert.com

O=DigiCert Inc

C=US

Serial Number

08:3B:E0:56:90:42:46:B1:A1:75:6A:C9:59:91:C7:4A

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Nov 10 00:00:00 2006 UTC

Validity Not After

Nov 10 00:00:00 2031 UTC

Subject Key Identifier

03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55

Authority Key Identifier

keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55

Thumbprint (SHA-1)

A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436​

Thumbprint (SHA-256)

4348A0E9444C78CB265E058D5E8944B4D84F9662BD26DB257F8934A443C70161

Pin (SHA-256)

r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=

DigiCert High Assurance EV Root CA

Subject

CN=DigiCert High Assurance EV Root CA

OU=www.digicert.com

O=DigiCert Inc

C=US

Serial Number

02:AC:5C:26:6A:0B:40:9B:8F:0B:79:F2:AE:46:25:77

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Nov 10 00:00:00 2006 UTC

Validity Not After

Nov 10 00:00:00 2031 UTC

Subject Key Identifier

b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3

Authority Key Identifier

keyid:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3

Thumbprint (SHA-1)

5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25​

Thumbprint (SHA-256)

7431E5F4C3C1CE4690774F0B61E05440883BA9A01ED00BA6ABD7806ED3B118CF

Pin (SHA-256)

WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=

D-TRUST Root Class 3 CA 2 2009

Subject

CN=D-TRUST Root Class 3 CA 2 2009

O=D-Trust GmbH

C=DE

Serial Number

09:83:F3

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 05 08:35:58 2009 UTC

Validity Not After

Nov 05 08:35:58 2029 UTC

Subject Key Identifier

fd:da:14:c4:9f:30:de:21:bd:1e:42:39:fc:ab:63:23:49:e0:f1:84

Thumbprint (SHA-1)

58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0​

Thumbprint (SHA-256)

49E7A442ACF0EA6287050054B52564B650E4F49E42E348D6AA38E039E957B1C1

Pin (SHA-256)

7KDxgUAs56hlKzG00DbfJH46MLf0GlDZHsT5CwBrQ6E=

CRL URLs

ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl​

D-TRUST Root Class 3 CA 2 EV 2009

Subject

CN=D-TRUST Root Class 3 CA 2 EV 2009

O=D-Trust GmbH

C=DE

Serial Number

09:83:F4

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 05 08:50:46 2009 UTC

Validity Not After

Nov 05 08:50:46 2029 UTC

Subject Key Identifier

d3:94:8a:4c:62:13:2a:19:2e:cc:af:72:8a:7d:36:d7:9a:1c:dc:67

Thumbprint (SHA-1)

96C91B0B95B4109842FAD0D82279FE60FAB91683​

Thumbprint (SHA-256)

EEC5496B988CE98625B934092EEC2908BED0B0F316C2D4730C84EAF1F3D34881

Pin (SHA-256)

/zQvtsTIvTCkcG9zSJU58Z5uSMwF9GJUZU9mENvFQOk=

CRL URLs

ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl

DST Root CA X3

Subject

CN=DST Root CA X3

O=Digital Signature Trust Co.

Serial Number

44:AF:B0:80:D6:A3:27:BA:89:30:39:86:2E:F8:40:6B

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Sep 30 21:12:19 2000 UTC

Validity Not After

Sep 30 14:01:15 2021 UTC

Subject Key Identifier

c4:a7:b1:a4:7b:2c:71:fa:db:e1:4b:90:75:ff:c4:15:60:85:89:10

Thumbprint (SHA-1)

DAC9024F54D8F6DF94935FB1732638CA6AD77C13​

Thumbprint (SHA-256)

0687260331A72403D909F105E69BCF0D32E1BD2493FFC6D9206D11BCD6770739

Pin (SHA-256)

Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=

Entrust Root Certification Authority - G2

Subject

CN=Entrust Root Certification Authority - G2

OU="(c) 2009 Entrust, Inc. - for authorized use only"

OU=See www.entrust.net/legal-terms

O="Entrust, Inc."

C=US

Serial Number

4A:53:8C:28

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Jul 07 17:25:54 2009 UTC

Validity Not After

Dec 07 17:55:54 2030 UTC

Subject Key Identifier

6a:72:26:7a:d0:1e:ef:7d:e7:3b:69:51:d4:6c:8d:9f:90:12:66:ab

Thumbprint (SHA-1)

8CF427FD790C3AD166068DE81E57EFBB932272D4​

Thumbprint (SHA-256)

43DF5774B03E7FEF5FE40D931A7BEDF1BB2E6B42738C4E6D3841103D3AA7F339

Pin (SHA-256)

du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=

Entrust.net Certification Authority (2048)

Subject

CN=Entrust.net Certification Authority (2048)

OU=(c) 1999 Entrust.net Limited

OU=www.entrust.net/CPS_2048 incorp. by ref. (limit s liab.)

O=Entrust.net

Serial Number

38:63:DE:F8

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Dec 24 17:50:51 1999 UTC

Validity Not After

Jul 24 14:15:12 2029 UTC

Subject Key Identifier

55:e4:81:d1:11:80:be:d8:89:b9:08:a3:31:f9:a1:24:09:16:b9:70

Thumbprint (SHA-1)

503006091D97D4F5AE39F7CBE7927D7D652D3431​

Thumbprint (SHA-256)

6DC47172E01CBCB0BF62580D895FE2B8AC9AD4F873801E0C10B9C837D21EB177

Pin (SHA-256)

HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg=

GlobalSign

Subject

CN=GlobalSign

O=GlobalSign

OU=GlobalSign Root CA - R2

Serial Number

04:00:00:00:00:01:0F:86:26:E6:0D

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Dec 15 08:00:00 2006 UTC

Validity Not After

Dec 15 08:00:00 2021 UTC

Subject Key Identifier

9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e

Authority Key Identifier

keyid:9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e

Thumbprint (SHA-1)

75E0ABB6138512271C04F85FDDDE38E4B7242EFE​

Thumbprint (SHA-256)

CA42DD41745FD0B81EB902362CF9D8BF719DA1BD1B1EFC946F5B4C99F42C1B9E

Pin (SHA-256)

iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=

CRL URLs

http://crl.globalsign.net/root-r2.crl

GlobalSign Root CA

Subject

CN=GlobalSign Root CA

OU=Root CA

O=GlobalSign nv-sa

C=BE

Serial Number

04:00:00:00:00:01:15:4B:5A:C3:94

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Sep 01 12:00:00 1998 UTC

Validity Not After

Jan 28 12:00:00 2028 UTC

Subject Key Identifier

60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b

Thumbprint (SHA-1)

B1BC968BD4F49D622AA89A81F2150152A41D829C​

Thumbprint (SHA-256)

EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99

Pin (SHA-256)

K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=

StartCom Certification Authority

Subject

CN=StartCom Certification Authority

OU=Secure Digital Certificate Signing

O=StartCom Ltd.

C=IL

Serial Number

01

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Sep 17 19:46:36 2006 UTC

Validity Not After

Sep 17 19:46:36 2036 UTC

Subject Key Identifier

4e:0b:ef:1a:a4:40:5b:a5:17:69:87:30:ca:34:68:43:d0:41:ae:f2

Thumbprint (SHA-1)

3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F​

Thumbprint (SHA-256)

C766A9BEF2D4071C863A31AA4920E813B2D198608CB7B7CFE21143B836DF09EA

Pin (SHA-256)

5C8kvU039KouVrl52D0eZSGf4Onjo4Khs8tmyTlV3nU=

CRL URLs

http://cert.startcom.org/sfsca-crl.crl

http://crl.startcom.org/sfsca-crl.crl

thawte Primary Root CA - G3

Subject

CN=thawte Primary Root CA - G3

OU="(c) 2008 thawte, Inc. - For authori​zed use only"

OU=Certification Services Division

O="thawte, Inc."

C=US

Serial Number

60:01:97:B7:46:A7:EA:B4:B4:9A:D6:4B:2F:F7:90:FB

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Apr 02 00:00:00 2008 UTC

Validity Not After

Dec 01 23:59:59 2037 UTC

Subject Key Identifier

ad:6c:aa:94:60:9c:ed:e4:ff:fa:3e:0a:74:2b:63:03:f7:b6:59:bf

Thumbprint (SHA-1)

F18B538D1BE903B6A6F056435B171589CAF36BF2​

Thumbprint (SHA-256)

4B03F45807AD70F21BFC2CAE71C9FDE4604C064CF5FFB686BAE5DBAAD7FDD34C

Pin (SHA-256)

GQbGEk27Q4V40A4GbVBUxsN/D6YCjAVUXgmU7drshik=

VeriSign Class 3 Public Primary Certification Authority - G5

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5

OU="(c) 2006 VeriSign, Inc. - For authorized use only"

OU=VeriSign Trust Network

O="VeriSign, Inc."

C=US

Serial Number

18:DA:D1:9E:26:7D:E8:BB:4A:21:58:CD:CC:6B:3B:4A

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Nov 08 00:00:00 2006 UTC

Validity Not After

Jul 16 23:59:59 2036 UTC

Subject Key Identifier

7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33

Thumbprint (SHA-1)

4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5​

Thumbprint (SHA-256)

9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF

Pin (SHA-256)

JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=

Certification Authority of WoSign

Subject

CN=Certification Authority of WoSign

O=WoSign CA Limited

C=CN

Issuer

CN=StartCom Certification Authority

OU=Secure Digital Certificate Signing

O=StartCom Ltd.

C=IL

Serial Number

5E:68:D6:11:71:94:63:50:56:00:68:F3:3E:C9:C5:91

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Aug 08 01:00:01 2009 UTC

Validity Not After

Aug 08 01:00:01 2039 UTC

Subject Key Identifier

Aug 08 01:00:01 2039 UTC

Thumbprint (SHA-1)

B94294BF91EA8FB64BE61097C7FB001359B676CB

Thumbprint (SHA-256)

4B22D5A6AEC99F3CDB79AA5EC06838479CD5ECBA7164F7F22DC1D65F63D85708

Pin (SHA-256)

1qGEQ9NI25lPk0zNjmNdgzonrB5W+K+vfJfLT0Pqtos=

AIA URLs

http://aia.startssl.com/certs/ca.crt

CRL URLs

http://crl.startssl.com/sfsca.crl

OCSP URLs

http://ocsp.startssl.com/ca​

CNNIC SHA256 SSL

Subject

CN=CNNIC SHA256 SSL O=CNNIC SHA256 SSL C=CN

Issuer

CN=CNNIC ROOT O=CNNIC C=CN

Serial Number

49:33:00:7C

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Dec 18 12:32:18 2014 UTC

Validity Not After

Dec 18 12:32:18 2024 UTC

Subject Key Identifier

b7:d1:59:8b:8c:0d:06:28:47:23:00:3a:36:04:a5:ee:38:76:53:3c

Authority Key Identifier

keyid:65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11

Thumbprint (SHA-1)

FC844648FC708433921BE88B18C48787A3E2813E

Thumbprint (SHA-256)

FA8B9F99DBB94E7B772AA9190846E777047C15C7A3BF4A1AF9C0CA984A689511

Pin (SHA-256)

dKZRcLDh7hBNZTmTIHOGJ6C2Om/ITjUCPkOnLTnrZXk=

AIA URLs

http://www.cnnic.cn/download/cert/CNNICROOT.cer

CRL URLs

ldap:///CN=crl1, OU=crl, O=CNNIC, C=CN?certificateRevocationList;binary,authorityRevocationList;binary,deltaRevocationList;binary

http://crl.cnnic.cn/download/rootsha2crl/CRL1.crl

OCSP URLs

http://ocspcnnicroot.cnnic.cn

D-TRUST SSL Class 3 CA 1 2009

Subject

CN=D-TRUST SSL Class 3 CA 1 2009

O=D-Trust GmbH

C=DE

Issuer

CN=D-TRUST Root Class 3 CA 2 2009

O=D-Trust GmbH

C=DE

Subject Alternative Name

RFC822 Name=info@d-trust.net

URL=http://www.d-trust.net

Serial Number

09:90:63

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 12 12:46:55 2009 UTC

Validity Not After

Nov 05 08:35:58 2029 UTC

Subject Key Identifier

50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Authority Key Identifier

keyid:fd:da:14:c4:9f:30:de:21:bd:1e:42:39:fc:ab:63:23:49:e0:f1:84

Thumbprint (SHA-1)

2FC5DE6528CDBE50A14C382FC1DE524FAABF95FC

Thumbprint (SHA-256)

6AC159B4C2BC8E729F3B84642EF1286BCC80D775FE278C740ADA468D59439025

Pin (SHA-256)

9w0QP9HzLXkfs+4zENaUFq2XKcQON1oyksoJ+Gg2AZE=

CRL URLs

ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl

OCSP URLs

http://root-c3-ca2-2009.ocsp.d-trust.net

D-TRUST SSL Class 3 CA 1 EV 2009

Subject

CN=D-TRUST SSL Class 3 CA 1 EV 2009

O=D-Trust GmbH

C=DE

Issuer

CN=D-TRUST Root Class 3 CA 2 EV 2009

O=D-Trust GmbH

C=DE

Subject Alternative Name

RFC822 Name=info@d-trust.net

URL=http://www.d-trust.net

Serial Number

09:90:64

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 12 12:52:43 2009 UTC

Validity Not After

Nov 05 08:50:46 2029 UTC

Subject Key Identifier

ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4

Authority Key Identifier

keyid:d3:94:8a:4c:62:13:2a:19:2e:cc:af:72:8a:7d:36:d7:9a:1c:dc:67

Thumbprint (SHA-1)

1069423D308D0FC54575059638560FC7556E32B3

Thumbprint (SHA-256)

B0935DC04B4E60C0C42DEF7EC57A1B1D8F958D17988E71CC80A8CF5E635BA5B4

Pin (SHA-256)

lv5BNZ5aWd27ooolULDolFTwIaaWjHvG4yyH3rss4X8=

CRL URLs

ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl

OCSP URLs

http://root-c3-ca2-ev-2009.ocsp.d-trust.net

DigiCert Cloud Services CA-1

Subject

CN=DigiCert Cloud Services CA-1

O=DigiCert Inc

C=US

Issuer

CN=DigiCert Global Root CA

OU=www.digicert.com

O=DigiCert Inc

C=US

Serial Number

01:9E:C1:C6:BD:3F:59:7B:B2:0C:33:38:E5:51:D8:77

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Aug 04 12:00:00 2015 UTC

Validity Not After

Aug 04 12:00:00 2030 UTC

Subject Key Identifier

dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7

Authority Key Identifier

keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55

Thumbprint (SHA-1)

81B68D6CD2F221F8F534E677523BB236BBA1DC56

Thumbprint (SHA-256)

2F6889961A7CA7067E8BA103C2CF9B9A924F8CA293F11178E23A1978D2F133D3

Pin (SHA-256)

UgpUVparimk8QCjtWQaUQ7EGrtrykc/L8N66EhFY3VE=

CRL URLs

http://crl4.digicert.com/DigiCertGlobalRootCA.crl

http://crl3.digicert.com/DigiCertGlobalRootCA.crl

OCSP URLs

http://ocsp.digicert.com

DigiCert SHA2 High Assurance Server CA

Subject

CN=DigiCert SHA2 High Assurance Server CA

OU=www.digicert.com

O=DigiCert Inc

C=US

Issuer

CN=DigiCert High Assurance EV Root CA

OU=www.digicert.com

O=DigiCert Inc

C=US

Serial Number

04:E1:E7:A4:DC:5C:F2:F3:6D:C0:2B:42:B8:5D:15:9F

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Oct 22 12:00:00 2013 UTC

Validity Not After

Oct 22 12:00:00 2028 UTC

Subject Key Identifier

51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Authority Key Identifier

keyid:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3

Thumbprint (SHA-1)

A031C46782E6E6C662C2C87C76DA9AA62CCABD8E

Thumbprint (SHA-256)

19400BE5B7A31FB733917700789D2F0A2471C0C9D506C0E504C06C16D7CB17C0

Pin (SHA-256)

k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws=

CRL URLs

http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl

OCSP URLs

http://ocsp.digicert.com

DigiCert SHA2 Secure Server CA

Subject

CN=DigiCert SHA2 Secure Server CA

O=DigiCert Inc

C=US

Issuer

CN=DigiCert Global Root CA

OU=www.digicert.com

O=DigiCert Inc

C=US

Serial Number

01:FD:A3:EB:6E:CA:75:C8:88:43:8B:72:4B:CF:BC:91

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Mar 08 12:00:00 2013 UTC

Validity Not After

Mar 08 12:00:00 2023 UTC

Subject Key Identifier

0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Authority Key Identifier

keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55

Thumbprint (SHA-1)

1FB86B1168EC743154062E8C9CC5B171A4B7CCB4

Thumbprint (SHA-256)

154C433C491929C5EF686E838E323664A00E6A0D822CCC958FB4DAB03E49A08F

Pin (SHA-256)

5kJvNEMw0KjrCAu7eXY5HZdvyCS13BbA0VJG1RSP91w=

CRL URLs

http://crl3.digicert.com/DigiCertGlobalRootCA.crl

http://crl4.digicert.com/DigiCertGlobalRootCA.crl

OCSP URLs

http://ocsp.digicert.com

Entrust Certification Authority - L1C

Subject

CN=Entrust Certification Authority - L1C

OU="(c) 2009 Entrust, Inc."

OU=www.entrust.net/rpa is incorporated by reference

O="Entrust, Inc."

C=US

Issuer

CN=Entrust.net Certification Authority (2048)

OU=(c) 1999 Entrust.net Limited

OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)

O=Entrust.net

Serial Number

4C:0E:8C:39

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Nov 11 15:40:40 2011 UTC

Validity Not After

Nov 12 02:51:17 2021 UTC

Subject Key Identifier

1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Authority Key Identifier

keyid:55:e4:81:d1:11:80:be:d8:89:b9:08:a3:31:f9:a1:24:09:16:b9:70

Thumbprint (SHA-1)

C53E73073F93CE7895DE7484126BC303DAB9E657

Thumbprint (SHA-256)

0EE4DAF71A85D842D23F4910FD4C909B7271861931F1D5FEAC868225F52700E2

Pin (SHA-256)

VFv5NemtodoRftw8KsvFb8AoCWwOJL6bOJS+Ui0bQ94=

CRL URLs

http://crl.entrust.net/2048ca.crl

OCSP URLs

http://ocsp.entrust.net

Entrust Certification Authority - L1K

Subject

CN=Entrust Certification Authority - L1K

OU="(c) 2012 Entrust, Inc. - for authorized use only"

OU=See www.entrust.net/legal-terms

O="Entrust, Inc."

C=US

Issuer

CN=Entrust Root Certification Authority - G2

OU="(c) 2009 Entrust, Inc. - for authorized use only"

OU=See www.entrust.net/legal-terms

O="Entrust, Inc."

C=US

Serial Number

0E:E9:4C:C3:00:00:00:00:51:D3:77:85

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Oct 05 19:13:56 2015 UTC

Validity Not After

Dec 05 19:43:56 2030 UTC

Subject Key Identifier

82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Authority Key Identifier

keyid:6a:72:26:7a:d0:1e:ef:7d:e7:3b:69:51:d4:6c:8d:9f:90:12:66:ab

Thumbprint (SHA-1)

F21C12F46CDB6B2E16F09F9419CDFF328437B2D7

Thumbprint (SHA-256)

13EFB39A2F6654E8C67BD04F4C6D4C90CD6CAB5091BCEDC73787F6B77D3D3FE7

Pin (SHA-256)

980Ionqp3wkYtN9SZVgMzuWQzJta1nfxNPwTem1X0uc=

CRL URLs

http://crl.entrust.net/g2ca.crl

OCSP URLs

http://ocsp.entrust.net

GlobalSign

Subject

CN=GlobalSign

O=GlobalSign

OU=GlobalSign Root CA - R3

Issuer

CN=GlobalSign Root CA

OU=Root CA

O=GlobalSign nv-sa

C=BE

Serial Number

04:00:00:00:00:01:25:07:1D:F9:AF

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 18 10:00:00 2009 UTC

Validity Not After

Mar 18 10:00:00 2019 UTC

Subject Key Identifier

8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc

Authority Key Identifier

keyid:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b

Thumbprint (SHA-1)

4765557AF418C68A641199146A7E556AA8242996

Thumbprint (SHA-256)

FDFC6560B09C237F468B8130EB90996FF85FA13FA266239B8D5863798D6AB898

Pin (SHA-256)

cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=

CRL URLs

http://crl.globalsign.net/root.crl

OCSP URLs

http://ocsp.globalsign.com/ExtendedSSLSHA256CACross

GlobalSign Extended Validation CA - SHA256 - G2

Subject

CN=GlobalSign Extended Validation CA - SHA256 - G2

O=GlobalSign nv-sa

C=BE

Issuer

CN=GlobalSign

O=GlobalSign

OU=GlobalSign Root CA - R2

Serial Number

04:00:00:00:00:01:44:4E:F0:4A:55

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Feb 20 10:00:00 2014 UTC

Validity Not After

Dec 15 08:00:00 2021 UTC

Subject Key Identifier

da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Authority Key Identifier

keyid:9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e

Thumbprint (SHA-1)

65BE102BE26928650E0EF54DC8F4F15AF5F98E8B

Thumbprint (SHA-256)

24F91C0705A0A5338641B365FB0D9D9709B56297CFF1857E73C02C1636D486AA

Pin (SHA-256)

LvRiGEjRqfzurezaWuj8Wie2gyHMrW5Q06LspMnox7A=

CRL URLs

http://crl.globalsign.net/root-r2.crl

OCSP URLs

http://ocsp.globalsign.com/rootr2

GlobalSign Extended Validation CA - SHA256 - G3

Subject

CN=GlobalSign Extended Validation CA - SHA256 - G3

O=GlobalSign nv-sa

C=BE

Issuer

CN=GlobalSign

O=GlobalSign

OU=GlobalSign Root CA - R3

Serial Number

48:A4:02:DD:27:92:0D:A2:08:34:9D:D1:99:7B

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Sep 21 00:00:00 2016 UTC

Validity Not After

Sep 21 00:00:00 2026 UTC

Subject Key Identifier

dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Authority Key Identifier

keyid:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc

Thumbprint (SHA-1)

6023192FE7B59D2789130A9FE4094F9B5570D4A2

Thumbprint (SHA-256)

AED5DD9A5339685DFB029F6D89A14335A96512C3CACC52B2994AF8B6B37FA4D2

Pin (SHA-256)

86fLIetopQLDNxFZ0uMI66Xpl1pFgLlHHn9v6kT0i4I=

CRL URLs

http://crl.globalsign.com/root-r3.crl

OCSP URLs

http://ocsp2.globalsign.com/rootr3

GlobalSign Organization Validation CA - SHA256 - G2

Subject

CN=GlobalSign Organization Validation CA - SHA256 - G2

O=GlobalSign nv-sa

C=BE

Issuer

CN=GlobalSign

O=GlobalSign

OU=GlobalSign Root CA - R3

Serial Number

04:00:00:00:00:01:31:89:C6:44:C9

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Aug 02 10:00:00 2011 UTC

Validity Not After

Aug 02 10:00:00 2022 UTC

Subject Key Identifier

96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Authority Key Identifier

keyid:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc

Thumbprint (SHA-1)

EF90B2B86F4756EBE7D36FF3015D63523A0076E9

Thumbprint (SHA-256)

0B339212D7CFF17A2C59E35669B58E77350133750A78DA9404770EDD470DEF76

Pin (SHA-256)

IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=

CRL URLs

http://crl.globalsign.net/root-r3.crl

OCSP URLs

http://ocsp2.globalsign.com/rootr3

GlobalSign Organization Validation CA - SHA256 - G2

Subject

CN=GlobalSign Organization Validation CA - SHA256 - G2

O=GlobalSign nv-sa

C=BE

Issuer

CN=GlobalSign Root CA

OU=Root CA

O=GlobalSign nv-sa

C=BE

Serial Number

04:00:00:00:00:01:44:4E:F0:42:47

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Feb 20 10:00:00 2014 UTC

Validity Not After

Feb 20 10:00:00 2024 UTC

Subject Key Identifier

96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Authority Key Identifier

keyid:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b

Thumbprint (SHA-1)

902EF2DEEB3C5B13EA4C3D5193629309E231AE55

Thumbprint (SHA-256)

74EF335E5E18788307FB9D89CB704BEC112ABD23487DBFF41C4DED5070F241D9

Pin (SHA-256)

IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=

CRL URLs

http://crl.globalsign.net/root.crl

OCSP URLs

http://ocsp.globalsign.com/rootr1

Let's Encrypt Authority X3

Subject

CN=Let's Encrypt Authority X3

O=Let's Encrypt

C=US

Issuer

CN=DST Root CA X3

O=Digital Signature Trust Co.

Serial Number

0A:01:41:42:00:00:01:53:85:73:6A:0B:85:EC:A7:08

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Mar 17 16:40:46 2016 UTC

Validity Not After

Mar 17 16:40:46 2021 UTC

Subject Key Identifier

a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Authority Key Identifier

keyid:c4:a7:b1:a4:7b:2c:71:fa:db:e1:4b:90:75:ff:c4:15:60:85:89:10

Thumbprint (SHA-1)

E6A3B45B062D509B3382282D196EFE97D5956CCB

Thumbprint (SHA-256)

25847D668EB4F04FDD40B12B6B0740C567DA7D024308EB6C2C96FE41D9DE218D

Pin (SHA-256)

YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=

AIA URLs

http://apps.identrust.com/roots/dstrootcax3.p7c

CRL URLs

http://crl.identrust.com/DSTROOTCAX3CRL.crl

OCSP URLs

http://isrg.trustid.ocsp.identrust.com

Microsoft IT SSL SHA2

Subject

CN=Microsoft IT SSL SHA2

OU=Microsoft IT

O=Microsoft Corporation

L=Redmond

S=Washington

C=US

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

07:27:9A:A9

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Dec 19 20:07:32 2013 UTC

Validity Not After

Dec 19 20:06:55 2017 UTC

Subject Key Identifier

51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

948E1652586240D453287AB69CAEB8F2F4F02117

Thumbprint (SHA-256)

34BD941A06ED10E2FAC8459F79E4748C1EA08F142C6DE5E557884D0D3CE249FA

Pin (SHA-256)

CzdPous1hY3sIkO55pUH7vklXyIHVZAl/UnprSQvpEI=

CRL URLs

http://cdp1.public-trust.com/CRL/Omniroot2025.crl

Microsoft IT SSL SHA2

Subject

CN=Microsoft IT SSL SHA2

OU=Microsoft IT

O=Microsoft Corporation

L=Redmond

S=Washington

C=US

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

07:27:AA:47

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

May 07 17:04:09 2014 UTC

Validity Not After

May 07 17:03:30 2018 UTC

Subject Key Identifier

51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

97EFF3028677894BDD4F9AC53F789BEE5DF4AD86

Thumbprint (SHA-256)

2399983E99703EBD01CEA466C10799810C4BA62A8D61B88170A334DCD61BB20F

Pin (SHA-256)

CzdPous1hY3sIkO55pUH7vklXyIHVZAl/UnprSQvpEI=

CRL URLs

http://cdp1.public-trust.com/CRL/Omniroot2025.crl

OCSP URLs

http://ocsp.omniroot.com/baltimoreroot

Microsoft IT TLS CA 1

Subject

CN=Microsoft IT TLS CA 1

OU=Microsoft IT

O=Microsoft Corporation

L=Redmond

S=Washington

C=US

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

08:B8:7A:50:1B:BE:9C:DA:2D:16:4D:3E:39:51:BF:55

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

May 20 12:51:28 2016 UTC

Validity Not After

May 20 12:51:28 2024 UTC

Subject Key Identifier

58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

417E225037FBFAA4F95761D5AE729E1AEA7E3A42

Thumbprint (SHA-256)

4FF404F02E2CD00188F15D1C00F4B6D1E38B5A395CF85314EAEBA855B6A64B75

Pin (SHA-256)

xjXxgkOYlag7jCtR5DreZm9b61iaIhd+J3+b2LiybIw=

CRL URLs

http://crl3.digicert.com/Omniroot2025.crl

OCSP URLs

http://ocsp.digicert.com

Microsoft IT TLS CA 2

Subject

CN=Microsoft IT TLS CA 2

OU=Microsoft IT

O=Microsoft Corporation

L=Redmond

S=Washington

C=US

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

0F:2C:10:C9:5B:06:C0:93:7F:B8:D4:49:F8:3E:85:69

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

May 20 12:51:57 2016 UTC

Validity Not After

May 20 12:51:57 2024 UTC

Subject Key Identifier

91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

54D9D20239080C32316ED9FF980A48988F4ADF2D

Thumbprint (SHA-256)

4E107C981B42ACBE41C01067E16D44DB64814D4193E572317EA04B87C79C475F

Pin (SHA-256)

wBdPad95AU7OgLRs0FU/E6ILO1MSCM84kJ9y0H+TT7s=

CRL URLs

http://crl3.digicert.com/Omniroot2025.crl

OCSP URLs

http://ocsp.digicert.com

Microsoft IT TLS CA 4

Subject

CN=Microsoft IT TLS CA 4

OU=Microsoft IT

O=Microsoft Corporation

L=Redmond

S=Washington

C=US

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

0B:6A:B3:B0:3E:B1:A9:F6:C4:60:92:6A:A8:CD:FE:B3

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

May 20 12:52:38 2016 UTC

Validity Not After

May 20 12:52:38 2024 UTC

Subject Key Identifier

7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

8A38755D0996823FE8FA3116A277CE446EAC4E99

Thumbprint (SHA-256)

5FFAC43E0DDC5B4AF2B696F6BC4DB7E91DF314BB8FE0D0713A0B1A7AD2A68FAC

Pin (SHA-256)

wUY9EOTJmS7Aj4fDVCu/KeE++mV7FgIcbn4WhMz1I2k=

CRL URLs

http://crl3.digicert.com/Omniroot2025.crl

OCSP URLs

http://ocsp.digicert.com

Microsoft IT TLS CA 5

Subject

CN=Microsoft IT TLS CA 5

OU=Microsoft IT

O=Microsoft Corporation

L=Redmond

S=Washington

C=US

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

08:88:CD:52:5F:19:24:44:4D:14:A5:82:91:DE:B9:52

Public Key Length

RSA 4096 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

May 20 12:53:03 2016 UTC

Validity Not After

May 20 12:53:03 2024 UTC

Subject Key Identifier

08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

AD898AC73DF333EB60AC1F5FC6C4B2219DDB79B7

Thumbprint (SHA-256)

F0EE5914ED94C7252D058B4E39808AEE6FA8F62CF0974FB7D6D2A9DF16E3A87F

Pin (SHA-256)

RCbqB+W8nwjznTeP4O6VjqcwdxIgI79eBpnBKRr32gc=

CRL URLs

http://crl3.digicert.com/Omniroot2025.crl

OCSP URLs

http://ocsp.digicert.com

Symantec Class 3 EV SSL CA - G3

Subject

CN=Symantec Class 3 EV SSL CA - G3

OU=Symantec Trust Network

O=Symantec Corporation

C=US

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5

OU="(c) 2006 VeriSign, Inc. - For authorized use only"

OU=VeriSign Trust Network

O="VeriSign, Inc."

C=US

Subject Alternative Name

Directory Address: CN=SymantecPKI-1-533

Serial Number

7E:E1:4A:6F:6F:EF:F2:D3:7F:3F:AD:65:4D:3A:DA:B4

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Oct 31 00:00:00 2013 UTC

Validity Not After

Oct 30 23:59:59 2023 UTC

Subject Key Identifier

01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Authority Key Identifier

keyid:7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33

Thumbprint (SHA-1)

E3FC0AD84F2F5A83ED6F86F567F8B14B40DCBF12

Thumbprint (SHA-256)

9E6BC5F9ECC52460E8EDC02C644D1BE1CB9F2316F41DAF3B616A0B2058294B31

Pin (SHA-256)

gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E=

CRL URLs

http://s1.symcb.com/pca3-g5.crl

OCSP URLs

http://s2.symcb.com

Symantec Class 3 Secure Server CA - G4

Subject

CN=Symantec Class 3 Secure Server CA - G4

OU=Symantec Trust Network

O=Symantec Corporation

C=US

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5

OU="(c) 2006 VeriSign, Inc. - For authorized use only"

OU=VeriSign Trust Network

O="VeriSign, Inc."

C=US

Subject Alternative Name

Directory Address: CN=SymantecPKI-1-534

Serial Number

51:3F:B9:74:38:70:B7:34:40:41:8D:30:93:06:99:FF

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Oct 31 00:00:00 2013 UTC

Validity Not After

Oct 30 23:59:59 2023 UTC

Subject Key Identifier

5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Authority Key Identifier

keyid:7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33

Thumbprint (SHA-1)

FF67367C5CD4DE4AE18BCCE1D70FDABD7C866135

Thumbprint (SHA-256)

EAE72EB454BF6C3977EBD289E970B2F5282949190093D0D26F98D0F0D6A9CF17

Pin (SHA-256)

9n0izTnSRF+W4W4JTq51avSXkWhQB8duS2bxVLfzXsY=

CRL URLs

http://s1.symcb.com/pca3-g5.crl

OCSP URLs

http://s2.symcb.com

thawte SHA256 SSL CA

Subject

CN=thawte SHA256 SSL CA

O="thawte, Inc."

C=US

Issuer

CN=thawte Primary Root CA - G3

OU="(c) 2008 thawte, Inc. - For authorized use only"

OU=Certification Services Division

O="thawte, Inc."

C=US

Subject Alternative Name

Directory Address: CN=VeriSignMPKI-2-415

Serial Number

36:34:9E:18:C9:9C:26:69:B6:56:2E:6C:E5:AD:71:32

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

May 23 00:00:00 2013 UTC

Validity Not After

May 22 23:59:59 2023 UTC

Subject Key Identifier

2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Authority Key Identifier

keyid:ad:6c:aa:94:60:9c:ed:e4:ff:fa:3e:0a:74:2b:63:03:f7:b6:59:bf

Thumbprint (SHA-1)

67D147D5DAB7F28D663CA5B7A9568F087427B9F7

Thumbprint (SHA-256)

3F3AF9C9CC2C7599EF8F6DD7CA516CFC1797D7D12002254F3BFD0D4D0FE9DE86

Pin (SHA-256)

/36ymPAVaJl3QDyB1lUkVf9GqJNug0R8JJPDN6348p8=

CRL URLs

http://crl.thawte.com/ThawtePCA-G3.crl

OCSP URLs

http://ocsp.thawte.com

Verizon Akamai SureServer CA G14-SHA2

Subject

CN=Verizon Akamai SureServer CA G14-SHA2

OU=Cybertrust

O=Verizon Enterprise Solutions

L=Amsterdam

C=NL

Issuer

CN=Baltimore CyberTrust Root

OU=CyberTrust

O=Baltimore

C=IE

Serial Number

07:27:A4:6B

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Apr 02 14:36:10 2014 UTC

Validity Not After

Apr 02 14:35:52 2021 UTC

Subject Key Identifier

f8:bd:fa:af:73:77:c6:c7:1b:f9:4b:4d:11:a7:d1:33:af:af:72:11

Authority Key Identifier

keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0

Thumbprint (SHA-1)

6AD2B04E2196E48BF685752890E811CD2ED60606

Thumbprint (SHA-256)

7373D219B42547E41BCB752BCBCBE93F592FF6F99C340CE57B73D38C3EC0BA98

Pin (SHA-256)

8XFPrRr4VxmEIYKUu35QtR3oGbduX1AlrBzaBUHgp7c=

AIA URLs

https://cacert.omniroot.com/baltimoreroot.crt

https://cacert.omniroot.com/baltimoreroot.der

CRL URLs

http://cdp1.public-trust.com/CRL/Omniroot2025.crl

OCSP URLs

http://ocsp.omniroot.com/baltimoreroot

WoSign Class 3 OV Server CA G2

Subject

CN=WoSign Class 3 OV Server CA G2

O=WoSign CA Limited

C=CN

Issuer

CN=Certification Authority of WoSign

O=WoSign CA Limited

C=CN

Serial Number

75:96:C2:3E:FA:89:59:45:6E:79:F7:17:BA:CF:64:F3

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 08 00:58:58 2014 UTC

Validity Not After

Nov 08 00:58:58 2029 UTC

Subject Key Identifier

f9:8b:ec:04:38:6a:3f:aa:06:c6:94:ad:73:95:2a:b0:c8:e6:b8:fb

Authority Key Identifier

keyid:e1:66:cf:0e:d1:f1:b3:4b:b7:06:20:14:fe:87:12:d5:f6:fe:fb:3e

Thumbprint (SHA-1)

2B437246CCBA25159EB5BEA162AC6018DCBFF472

Thumbprint (SHA-256)

44D6F904725D2A4994A73DD22C5EB53AF7F6F717B82ECA8C807D881960A89046

Pin (SHA-256)

g2OooIQQ49GAmFSch0jRh0I8e0nmz1cFy77u88OiTSQ=

AIA URLs

http://aia1.wosign.com/ca1g2-server3.cer

CRL URLs

http://crls1.wosign.com/ca1.crl

OCSP URLs

http://ocsp1.wosign.com/ca1

WoSign Class 3 OV Server CA

Subject

CN=WoSign Class 3 OV Server CA

O=WoSign CA Limited

C=CN

Issuer

CN=Certification Authority of WoSign

O=WoSign CA Limited

C=CN

Serial Number

67:3F:33:4F:21:53:36:52:C3:5E:15:D2:FD:B3:02:0F

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Aug 08 01:00:05 2009 UTC

Validity Not After

Aug 08 01:00:05 2024 UTC

Subject Key Identifier

62:2e:81:d9:e3:42:79:14:a3:cd:d9:54:8a:6e:f8:de:95:aa:8f:98

Authority Key Identifier

keyid:e1:66:cf:0e:d1:f1:b3:4b:b7:06:20:14:fe:87:12:d5:f6:fe:fb:3e

Thumbprint (SHA-1)

6F7E71DEFD5AA22CD4D1079B3059EB081656F998

Thumbprint (SHA-256)

92AC95FF857C959606E40D77AF70084205537EE9F0D9F23ED4FD22BE253864AE

Pin (SHA-256)

xP9f/6sJDH+C0N+PyfdOCjocQc+CNaYOROjRSXWaLFM=

AIA URLs

http://aia1.wosign.com/ca1-class3-server.cer

CRL URLs

http://crls1.wosign.com/ca1.crl

OCSP URLs

http://ocsp1.wosign.com/ca1

WoSign Class 4 EV Server CA G2

Subject

CN=WoSign Class 4 EV Server CA G2

O=WoSign CA Limited

C=CN

Issuer

CN=Certification Authority of WoSign

O=WoSign CA Limited

C=CN

Serial Number

3E:7C:DE:2C:5C:8F:6C:E9:20:45:11:BB:C8:78:63:6A

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha256RSA

Validity Not Before

Nov 08 00:58:58 2014 UTC

Validity Not After

Nov 08 00:58:58 2029 UTC

Subject Key Identifier

bb:73:8b:28:b8:25:a8:60:06:d8:90:ec:4b:7d:66:a8:fb:7d:80:c5

Authority Key Identifier

keyid:e1:66:cf:0e:d1:f1:b3:4b:b7:06:20:14:fe:87:12:d5:f6:fe:fb:3e

Thumbprint (SHA-1)

B44D99663424E68397A37AD89142F6CD346636BD

Thumbprint (SHA-256)

91408A7183FD34CA493A88DE74E2C21DF965E92FFB9E55D385B10809B733A31B

Pin (SHA-256)

GGo20w4VPJBJishocHI/D5PInet81g/rO3g/sgiwrZ4=

AIA URLs

http://aia1.wosign.com/ca1g2-server4.cer

CRL URLs

http://crls1.wosign.com/ca1.crl

OCSP URLs

http://ocsp1.wosign.com/ca1

WoSign Class 4 EV Server CA

Subject

CN=WoSign Class 4 EV Server CA

O=WoSign CA Limited

C=CN

Issuer

CN=Certification Authority of WoSign

O=WoSign CA Limited

C=CN

Serial Number

15:3B:9B:E7:A8:04:7B:23:21:5F:39:96:C6:FA:6D:D0

Public Key Length

RSA 2048 bits (e 65537)

Signature Algorithm

sha1RSA

Validity Not Before

Aug 08 01:00:05 2009 UTC

Validity Not After

Aug 08 01:00:05 2024 UTC

Subject Key Identifier

c9:d3:f5:26:38:8a:f0:11:82:2f:ef:5d:3a:6c:4d:95:31:c3:65:32

Authority Key Identifier

keyid:e1:66:cf:0e:d1:f1:b3:4b:b7:06:20:14:fe:87:12:d5:f6:fe:fb:3e

Thumbprint (SHA-1)

B5A9123C2008A97FE7AF89D768F19EB11567E6BA

Thumbprint (SHA-256)

C91FDCF3A824878162CDA74FEB55A693BB829A78795BDC2097EF3FF0B757380E

Pin (SHA-256)

7Rvftu22rQTHicX/ZZX1SzGRGaU8rR+BnUgO3SvzdW0=

AIA URLs

http://aia1.wosign.com/ca1-class4-server.cer

CRL URLs

http://crls1.wosign.com/ca1.crl

OCSP URLs

http://ocsp1.wosign.com/ca1

The following include legacy certificates that aren't included above and will be merged with the list above over time.

evsecure-aia.verisign.com
sa.symcb.com
sd.symcb.com
*.omniroot.com
*.verisign.com
*.symcb.com
*.symcd.com
*.verisign.net
*.geotrust.com
*.entrust.net
*.public-trust.com
EVIntl-ocsp.verisign.com
EVSecure-ocsp.verisign.com
isrg.trustid.ocsp.identrust.com
ocsp.digicert.com
ocsp.entrust.net
ocsp.globalsign.com/ExtendedSSLSHA256CACross
ocsp.globalsign.com/rootr1
ocsp.globalsign.com/rootr2
ocsp2.globalsign.com/rootr3
ocsp.int-x3.letsencrypt.org/
ocsp.msocsp.com
ocsp.omniroot.com/baltimoreroot
ocsp2.globalsign.com/gsextendvalsha2g3r3
ocsp2.globalsign.com/gsorganizationvalsha2g2
ocsp2.globalsign.com/gsorganizationvalsha2g3
ocsp2.globalsign.com/rootr3
ocspx.digicert.com
s2.symcb.com
sr.symcd.com
su.symcd.com
vassg142.ocsp.omniroot.com
cdp1.public-trust.com/CRL/Omniroot2025.crl
crl.entrust.net/2048ca.crl
crl.entrust.net/g2ca.crl
crl.entrust.net/level1k.crl
crl.entrust.net/rootca1.crl
crl.globalsign.com/gs/gsextendvalsha2g3r3.crl
crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
crl.globalsign.com/gsorganizationvalsha2g3.crl
crl.globalsign.com/root.crl
crl.globalsign.net/root-r2.crl
crl.globalsign.com/root-r3.crl
crl.globalsign.net/root.crl
crl.identrust.com/DSTROOTCAX3CRL.crl
crl.microsoft.com/pki/mscorp/crl/msitwww1.crl
crl.microsoft.com/pki/mscorp/crl/msitwww2.crl
crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
crl3.digicert.com/DigiCertGlobalRootCA.crl
crl3.digicert.com/sha2-ev-server-g1.crl
crl3.digicert.com/sha2-ha-server-g5.crl
crl3.digicert.com/ssca-sha2-g5.crl
crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl
crl4.digicert.com/DigiCertGlobalRootCA.crl
crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
crl4.digicert.com/sha2-ev-server-g1.crl
crl4.digicert.com/sha2-ha-server-g5.crl
crl4.digicert.com/ssca-sha2-g5.crl
EVIntl-crl.verisign.com/EVIntl2006.crl
EVSecure-crl.verisign.com/pca3-g5.crl
mscrl.microsoft.com/pki/mscorp/crl/msitwww1.crl
mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
s1.symcb.com/pca3-g5.crl
sr.symcb.com/sr.crl
su.symcb.com/su.crl
vassg142.crl.omniroot.com/vassg142.crl
aia.entrust.net/l1k-chain256.cer
apps.identrust.com/roots/dstrootcax3.p7c
https://cacert.a.omniroot.com/vassg142.crt
https://cacert.a.omniroot.com/vassg142.der
https://cacert.omniroot.com/baltimoreroot.crt
https://cacert.omniroot.com/baltimoreroot.der
cacerts.digicert.com/DigiCertCloudServicesCA-1.crt
cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
cert.int-x3.letsencrypt.org/
EVIntl-aia.verisign.com/EVIntl2006.cer
secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt
secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt
secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
sr.symcb.com/sr.crt
su.symcb.com/su.crt
https://www.digicert.com/CACerts/DigiCertGlobalRootCA.crt
https://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.crt
www.microsoft.com/pki/mscorp/msitwww1.crt
www.microsoft.com/pki/mscorp/msitwww2.crt
Connect with an expert
Contact us
Expand your skills
Explore training

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×