Microsoft RSA Root Certificate Authority 2017.crt: CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,C=US (Root Certificate, Expiring 2042-07-18) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: http://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt (in DER format )
Serial Number : 40975477897264996090493496164228220339
SHA-1 Fingerprint : 73a5e64a3bff8316ff0edccc618a906e4eae4d74
SHA-1 Fingerprint : 73:a5:e6:4a:3b:ff:83:16:ff:0e:dc:cc:61:8a:90:6e:4e:ae:4d:74
SHA-256 Fingerprint : c741f70f4b2a8d88bf2e71c14122ef53ef10eba0cfa5e64cfa20f418853073e0
SHA-256 Fingerprint : c7:41:f7:0f:4b:2a:8d:88:bf:2e:71:c1:41:22:ef:53:ef:10:eb:a0:cf:a5:e6:4c:fa:20:f4:18:85:30:73:e0
Signature Hash Algorithm : sha384
Subject : CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,C=US
- Country Name: US (United States of America)
- Organization: Microsoft Corporation
- Common Name: Microsoft RSA Root Certificate Authority 2017
Not Valid Before: 2019-12-18 22:51:22
Not Valid After: 2042-07-18 23:00:23
Issuer (Parent Certificate):
- Issuer Name: CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CP_v3.1.6.pdf https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CP_v3.1.5.pdf https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CP_v3.1.4.pdf https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CP_v3.1.2.pdf
- Certificate Practice Statement (CPS) URL: https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CPS_v3.2.2.pdf https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CPS_v3.2.1.pdf https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CPS_v3.2.0.pdf https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CPS_v3.1.9.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=fc6f34ea-9248-4ffe-a94b-9e870afae5b7
- Standard Audit Period Start Date: 2021.05.01
- Standard Audit Period End Date: 2022.04.30
- Standard Audit Statement Date: 2022.06.17
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://www.microsoft.com/pkiops/crl/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crl

Download certificate through curl:

curl -sSL "http://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www.microsoft.com/pkiops/certs/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d3:97:09:5f:d8:b4:b3:47:70:1e:aa:be:7f:45:b3
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017
        Validity
            Not Before: Dec 18 22:51:22 2019 GMT
            Not After : Jul 18 23:00:23 2042 GMT
        Subject: C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:ca:5b:be:94:33:8c:29:95:91:16:0a:95:bd:47:
                    62:c1:89:f3:99:36:df:46:90:c9:a5:ed:78:6a:6f:
                    47:91:68:f8:27:67:50:33:1d:a1:a6:fb:e0:e5:43:
                    a3:84:02:57:01:5d:9c:48:40:82:53:10:bc:bf:c7:
                    3b:68:90:b6:82:2d:e5:f4:65:d0:cc:6d:19:cc:95:
                    f9:7b:ac:4a:94:ad:0e:de:4b:43:1d:87:07:92:13:
                    90:80:83:64:35:39:04:fc:e5:e9:6c:b3:b6:1f:50:
                    94:38:65:50:5c:17:46:b9:b6:85:b5:1c:b5:17:e8:
                    d6:45:9d:d8:b2:26:b0:ca:c4:70:4a:ae:60:a4:dd:
                    b3:d9:ec:fc:3b:d5:57:72:bc:3f:c8:c9:b2:de:4b:
                    6b:f8:23:6c:03:c0:05:bd:95:c7:cd:73:3b:66:80:
                    64:e3:1a:ac:2e:f9:47:05:f2:06:b6:9b:73:f5:78:
                    33:5b:c7:a1:fb:27:2a:a1:b4:9a:91:8c:91:d3:3a:
                    82:3e:76:40:b4:cd:52:61:51:70:28:3f:c5:c5:5a:
                    f2:c9:8c:49:bb:14:5b:4d:c8:ff:67:4d:4c:12:96:
                    ad:f5:fe:78:a8:97:87:d7:fd:5e:20:80:dc:a1:4b:
                    22:fb:d4:89:ad:ba:ce:47:97:47:55:7b:8f:45:c8:
                    67:28:84:95:1c:68:30:ef:ef:49:e0:35:7b:64:e7:
                    98:b0:94:da:4d:85:3b:3e:55:c4:28:af:57:f3:9e:
                    13:db:46:27:9f:1e:a2:5e:44:83:a4:a5:ca:d5:13:
                    b3:4b:3f:c4:e3:c2:e6:86:61:a4:52:30:b9:7a:20:
                    4f:6f:0f:38:53:cb:33:0c:13:2b:8f:d6:9a:bd:2a:
                    c8:2d:b1:1c:7d:4b:51:ca:47:d1:48:27:72:5d:87:
                    eb:d5:45:e6:48:65:9d:af:52:90:ba:5b:a2:18:65:
                    57:12:9f:68:b9:d4:15:6b:94:c4:69:22:98:f4:33:
                    e0:ed:f9:51:8e:41:50:c9:34:4f:76:90:ac:fc:38:
                    c1:d8:e1:7b:b9:e3:e3:94:e1:46:69:cb:0e:0a:50:
                    6b:13:ba:ac:0f:37:5a:b7:12:b5:90:81:1e:56:ae:
                    57:22:86:d9:c9:d2:d1:d7:51:e3:ab:3b:c6:55:fd:
                    1e:0e:d3:74:0a:d1:da:aa:ea:69:b8:97:28:8f:48:
                    c4:07:f8:52:43:3a:f4:ca:55:35:2c:b0:a6:6a:c0:
                    9c:f9:f2:81:e1:12:6a:c0:45:d9:67:b3:ce:ff:23:
                    a2:89:0a:54:d4:14:b9:2a:a8:d7:ec:f9:ab:cd:25:
                    58:32:79:8f:90:5b:98:39:c4:08:06:c1:ac:7f:0e:
                    3d:00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                09:CB:59:7F:86:B2:70:8F:1A:C3:39:E3:C0:D9:E9:BF:BB:4D:B2:23
            1.3.6.1.4.1.311.21.1: 
                ...
    Signature Algorithm: sha384WithRSAEncryption
         ac:af:3e:5d:c2:11:96:89:8e:a3:e7:92:d6:97:15:b8:13:a2:
         a6:42:2e:02:cd:16:05:59:27:ca:20:e8:ba:b8:e8:1a:ec:4d:
         a8:97:56:ae:65:43:b1:8f:00:9b:52:cd:55:cd:53:39:6d:62:
         4c:8b:0d:5b:7c:2e:44:bf:83:10:8f:f3:53:82:80:c3:4f:3a:
         c7:6e:11:3f:e6:e3:16:91:84:fb:6d:84:7f:34:74:ad:89:a7:
         ce:b9:d7:d7:9f:84:64:92:be:95:a1:ad:09:53:33:dd:ee:0a:
         ea:4a:51:8e:6f:55:ab:ba:b5:94:46:ae:8c:7f:d8:a2:50:25:
         65:60:80:46:db:33:04:ae:6c:b5:98:74:54:25:dc:93:e4:f8:
         e3:55:15:3d:b8:6d:c3:0a:a4:12:c1:69:85:6e:df:64:f1:53:
         99:e1:4a:75:20:9d:95:0f:e4:d6:dc:03:f1:59:18:e8:47:89:
         b2:57:5a:94:b6:a9:d8:17:2b:17:49:e5:76:cb:c1:56:99:3a:
         37:b1:ff:69:2c:91:91:93:e1:df:4c:a3:37:76:4d:a1:9f:f8:
         6d:1e:1d:d3:fa:ec:fb:f4:45:1d:13:6d:cf:f7:59:e5:22:27:
         72:2b:86:f3:57:bb:30:ed:24:4d:dc:7d:56:bb:a3:b3:f8:34:
         79:89:c1:e0:f2:02:61:f7:a6:fc:0f:bb:1c:17:0b:ae:41:d9:
         7c:bd:27:a3:fd:2e:3a:d1:93:94:b1:73:1d:24:8b:af:5b:20:
         89:ad:b7:67:66:79:f5:3a:c6:a6:96:33:fe:53:92:c8:46:b1:
         11:91:c6:99:7f:8f:c9:d6:66:31:20:41:10:87:2d:0c:d6:c1:
         af:34:98:ca:64:83:fb:13:57:d1:c1:f0:3c:7a:8c:a5:c1:fd:
         95:21:a0:71:c1:93:67:71:12:ea:8f:88:0a:69:19:64:99:23:
         56:fb:ac:2a:2e:70:be:66:c4:0c:84:ef:e5:8b:f3:93:01:f8:
         6a:90:93:67:4b:b2:68:a3:b5:62:8f:e9:3f:8c:7a:3b:5e:0f:
         e7:8c:b8:c6:7c:ef:37:fd:74:e2:c8:4f:33:72:e1:94:39:6d:
         bd:12:af:be:0c:4e:70:7c:1b:6f:8d:b3:32:93:73:44:16:6d:
         e8:f4:f7:e0:95:80:8f:96:5d:38:a4:f4:ab:de:0a:30:87:93:
         d8:4d:00:71:62:45:27:4b:3a:42:84:5b:7f:65:b7:67:34:52:
         2d:9c:16:6b:aa:a8:d8:7b:a3:42:4c:71:c7:0c:ca:3e:83:e4:
         a6:ef:b7:01:30:5e:51:a3:79:f5:70:69:a6:41:44:0f:86:b0:
         2c:91:c6:3d:ea:ae:0f:84

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates