The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services CPS on this page.

Certificate Authority	Certificate	Certificate Revocation List
Microsoft ECC Root Certificate Authority 2017	Thumbprint (sha1) : 999a64c37ff47d9fab95f14769891460eec4c3c5 crt active expired revoked	crl
Microsoft RSA Root Certificate Authority 2017	Thumbprint (sha1) : 73a5e64a3bff8316ff0edccc618a906e4eae4d74 crt active expired revoked	crl
Microsoft EV ECC Root Certificate Authority 2017	Thumbprint (sha1) : 6b1937abfd64e1e40daf2262a27857c015d6228d crt	crl
Microsoft EV RSA Root Certificate Authority 2017	Thumbprint (sha1) : ada06e72393ccbe873648cf122a91c35ef4c984d crt	crl
The following CAs are no longer issuing as of December 18, 2019
Microsoft ECC Root Certificate Authority 2017	Thumbprint (sha1) : 7CA9013D43721551E987380B3EAE4B442DC037EA crt	crl
Microsoft RSA Root Certificate Authority 2017	Thumbprint (sha1) : EE68C3E94AB5D55EB9395116424E25B0CADD9009 crt	crl
Microsoft EV ECC Root Certificate Authority 2017	Thumbprint (sha1) : B8095F5A89FB47A7017ED794DD4F611E27830E27 crt	crl
Microsoft EV RSA Root Certificate Authority 2017	Thumbprint (sha1) : 3AD38A39CE4E88DCDF46995E969FC339D0799858 crt	crl

The following certificates have been crossed signed by DigiCert Global Root G2 (RSA):

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Azure TLS Issuing CA 01	Thumbprint (sha1) : 2f2877c5d778c31e0f29c7e371df5471bd673173 crt	crl
Microsoft Azure TLS Issuing CA 02	Thumbprint (sha1) : e7eea674ca718e3befd90858e09f8372ad0ae2aa crt	crl
Microsoft Azure TLS Issuing CA 05	Thumbprint (sha1) : 6c3af02e7f269aa73afd0eff2a88a4a1f04ed1e5 crt	crl
Microsoft Azure TLS Issuing CA 06	Thumbprint (sha1) : 30e01761ab97e59a06b41ef20af6f2de7ef4f7b0 crt	crl

The following certificates have been crossed signed by DigiCert Global Root G3 (ECC):

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Azure ECC TLS Issuing CA 01	Thumbprint (sha1) : 92503d0d74a7d3708197b6ee13082d52117a6ab0 crt	crl
Microsoft Azure ECC TLS Issuing CA 02	Thumbprint (sha1) : 1e981ccddc69102a45c6693ee84389c3cf2329f1 crt	crl
Microsoft Azure ECC TLS Issuing CA 05	Thumbprint (sha1) : c6363570af8303cdf31c1d5ad81e19dbfe172531 crt	crl
Microsoft Azure ECC TLS Issuing CA 06	Thumbprint (sha1) : 7365adaedfea4909c1baadbab68719ad0c381163 crt	crl

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Third Party CPS on this page.

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Identity Verification Root Certificate Authority 2020	Thumbprint (sha1) : f40042e2e5f7e8ef8189fed15519aece42c3bfa2 crt	crl
Microsoft Public RSA Timestamping CA 2020	Thumbprint (sha1) : 27f0abac2877ba255f62b389b43ff539a0fb598e crt	crl

The following certificate authorities are operated in accordance with the practices described in the Microsoft PKI Services Corporate CPS on this page.

Certificate Authority	Certificate	Certificate Revocation List
Microsoft Root Certificate Authority 2010	Thumbprint (sha1) : 3B1EFD3A66EA28B16697394703A72CA340A05BD5 crt	crl
Microsoft Root Certificate Authority 2011	Thumbprint (sha1) : 8F43288AD272F3103B6FB1428485EA3014C0BCFE crt	crl
Microsoft Time Stamp Root Certificate Authority 2014	Thumbprint (sha1) : 0119E81BE9A14CD8E22F40AC118C687ECBA3F4D8 crt	crl
Microsoft ECC Product Root Certificate Authority 2018	Thumbprint (sha1) : 06F1AA330B927B753A40E68CDF22E34BCBEF3352 crt	crl
Microsoft ECC TS Root Certificate Authority 2018	Thumbprint (sha1) : 31F9FC8BA3805986B721EA7295C65B3A44534274 crt	crl