Microsoft RSA Root Certificate Authority 2017.crt: CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US (Root Certificate, Expiring 2042-07-26) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: http://www.microsoft.com/pkiops/certs/archived/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt (in PEM format )
Serial Number : 55539083420549683942790126072845468523
SHA-1 Fingerprint : ee68c3e94ab5d55eb9395116424e25b0cadd9009
SHA-1 Fingerprint : ee:68:c3:e9:4a:b5:d5:5e:b9:39:51:16:42:4e:25:b0:ca:dd:90:09
SHA-256 Fingerprint : ecdd47b5acbfa328211e1bff54adeac95e6991e3c1d50e27b527e903208040a1
SHA-256 Fingerprint : ec:dd:47:b5:ac:bf:a3:28:21:1e:1b:ff:54:ad:ea:c9:5e:69:91:e3:c1:d5:0e:27:b5:27:e9:03:20:80:40:a1
Signature Hash Algorithm : sha384
Subject : CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
- Country Name: US (United States of America)
- State or Province Name: Washington
- Locality: Redmond
- Organization: Microsoft Corporation
- Common Name: Microsoft RSA Root Certificate Authority 2017
Not Valid Before: 2017-07-26 22:07:17
Not Valid After: 2042-07-26 22:15:47
Issuer (Parent Certificate):
- Issuer Name: CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CP_v3.1.4.pdf
- Certificate Practice Statement (CPS) URL: Unknown
- Auditor: BDO International Limited
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=70ae9251-8e87-4ce4-963c-b712e66ee502
- Standard Audit Period Start Date: 2018.05.01
- Standard Audit Period End Date: 2019.04.30
- Standard Audit Statement Date: 2019.07.25
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: Unknown

Download certificate through curl:

curl -sSL "http://www.microsoft.com/pkiops/certs/archived/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www.microsoft.com/pkiops/certs/archived/Microsoft%20RSA%20Root%20Certificate%20Authority%202017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c8:70:39:f4:db:fd:b9:4d:bc:da:6c:a7:92:83:6b
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017
        Validity
            Not Before: Jul 26 22:07:17 2017 GMT
            Not After : Jul 26 22:15:47 2042 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:ca:5b:be:94:33:8c:29:95:91:16:0a:95:bd:47:
                    62:c1:89:f3:99:36:df:46:90:c9:a5:ed:78:6a:6f:
                    47:91:68:f8:27:67:50:33:1d:a1:a6:fb:e0:e5:43:
                    a3:84:02:57:01:5d:9c:48:40:82:53:10:bc:bf:c7:
                    3b:68:90:b6:82:2d:e5:f4:65:d0:cc:6d:19:cc:95:
                    f9:7b:ac:4a:94:ad:0e:de:4b:43:1d:87:07:92:13:
                    90:80:83:64:35:39:04:fc:e5:e9:6c:b3:b6:1f:50:
                    94:38:65:50:5c:17:46:b9:b6:85:b5:1c:b5:17:e8:
                    d6:45:9d:d8:b2:26:b0:ca:c4:70:4a:ae:60:a4:dd:
                    b3:d9:ec:fc:3b:d5:57:72:bc:3f:c8:c9:b2:de:4b:
                    6b:f8:23:6c:03:c0:05:bd:95:c7:cd:73:3b:66:80:
                    64:e3:1a:ac:2e:f9:47:05:f2:06:b6:9b:73:f5:78:
                    33:5b:c7:a1:fb:27:2a:a1:b4:9a:91:8c:91:d3:3a:
                    82:3e:76:40:b4:cd:52:61:51:70:28:3f:c5:c5:5a:
                    f2:c9:8c:49:bb:14:5b:4d:c8:ff:67:4d:4c:12:96:
                    ad:f5:fe:78:a8:97:87:d7:fd:5e:20:80:dc:a1:4b:
                    22:fb:d4:89:ad:ba:ce:47:97:47:55:7b:8f:45:c8:
                    67:28:84:95:1c:68:30:ef:ef:49:e0:35:7b:64:e7:
                    98:b0:94:da:4d:85:3b:3e:55:c4:28:af:57:f3:9e:
                    13:db:46:27:9f:1e:a2:5e:44:83:a4:a5:ca:d5:13:
                    b3:4b:3f:c4:e3:c2:e6:86:61:a4:52:30:b9:7a:20:
                    4f:6f:0f:38:53:cb:33:0c:13:2b:8f:d6:9a:bd:2a:
                    c8:2d:b1:1c:7d:4b:51:ca:47:d1:48:27:72:5d:87:
                    eb:d5:45:e6:48:65:9d:af:52:90:ba:5b:a2:18:65:
                    57:12:9f:68:b9:d4:15:6b:94:c4:69:22:98:f4:33:
                    e0:ed:f9:51:8e:41:50:c9:34:4f:76:90:ac:fc:38:
                    c1:d8:e1:7b:b9:e3:e3:94:e1:46:69:cb:0e:0a:50:
                    6b:13:ba:ac:0f:37:5a:b7:12:b5:90:81:1e:56:ae:
                    57:22:86:d9:c9:d2:d1:d7:51:e3:ab:3b:c6:55:fd:
                    1e:0e:d3:74:0a:d1:da:aa:ea:69:b8:97:28:8f:48:
                    c4:07:f8:52:43:3a:f4:ca:55:35:2c:b0:a6:6a:c0:
                    9c:f9:f2:81:e1:12:6a:c0:45:d9:67:b3:ce:ff:23:
                    a2:89:0a:54:d4:14:b9:2a:a8:d7:ec:f9:ab:cd:25:
                    58:32:79:8f:90:5b:98:39:c4:08:06:c1:ac:7f:0e:
                    3d:00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                09:CB:59:7F:86:B2:70:8F:1A:C3:39:E3:C0:D9:E9:BF:BB:4D:B2:23
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm

    Signature Algorithm: sha384WithRSAEncryption
         10:1c:c1:49:7e:5b:25:0c:6d:a6:97:be:4e:5f:70:b1:ba:cf:
         06:ba:6c:f5:3c:3d:9f:15:d6:29:4f:7b:fe:52:b2:cf:65:ee:
         70:eb:cf:1e:71:8d:eb:24:c7:c3:21:b7:ff:e3:24:ed:14:01:
         eb:c9:92:8a:da:e1:74:e3:32:f0:7e:e2:39:14:2d:90:d4:20:
         ef:2f:10:31:6c:ff:59:00:ae:b0:b3:7d:1a:68:1a:b3:86:16:
         a6:ea:55:aa:91:64:1a:63:b3:0c:d4:7f:90:d1:78:13:d3:73:
         ce:47:f3:43:df:dd:86:b5:db:fc:ad:3b:ab:5f:4f:40:55:b6:
         c6:77:1f:86:90:31:ef:87:51:7a:ce:05:c7:f1:f3:d6:03:69:
         08:d2:79:62:5f:96:4c:63:59:0b:0c:92:65:af:97:70:fa:4d:
         b2:4e:f7:98:6a:39:90:4d:5c:0f:c0:b2:36:ea:40:0f:b2:65:
         4d:1d:75:2d:4a:41:a8:17:90:21:18:4f:1d:3e:a4:36:8e:7e:
         9d:0d:45:9b:3a:16:b6:54:22:2a:c9:53:95:25:0f:07:94:68:
         43:9d:90:b6:58:ec:38:2f:d4:b7:ec:5a:79:e2:74:03:84:5b:
         63:a8:19:18:e3:27:0f:38:0d:57:2e:3b:c6:d2:c3:ed:f8:82:
         45:65:3b:eb:71:f1:54:a0:47:57:58:59:b3:1f:32:90:59:01:
         53:12:4a:fb:06:02:2a:41:b0:1e:84:a3:5e:b6:c2:2e:07:56:
         9b:eb:e8:58:e7:3b:de:3e:74:bb:7d:c0:0f:2c:6f:08:b7:26:
         96:0b:4f:be:a7:b1:f3:0c:26:11:a4:a1:3c:19:41:09:16:19:
         77:31:8e:bd:25:84:19:be:f1:74:73:31:30:c7:47:4e:36:64:
         24:cb:4b:8f:e0:db:62:7a:c9:1f:80:83:2d:a7:5d:53:1a:1b:
         18:93:bc:80:fe:5c:61:ba:72:7c:b5:52:a6:69:ca:8b:81:d9:
         08:2b:4c:be:72:94:98:f2:cb:57:cd:16:6d:2b:a4:5f:68:81:
         cd:37:50:4a:4e:06:f0:3e:a3:98:d0:09:84:f3:b4:0a:50:ac:
         b9:83:ae:58:24:2b:c7:35:9f:6d:e3:7c:c3:1d:2f:8b:ef:0a:
         0c:76:35:42:8c:35:15:fc:31:71:38:f0:3e:71:3f:17:93:03:
         6e:31:94:89:79:d9:a1:7c:0d:af:9d:a4:9e:fe:a8:ce:f3:34:
         fb:d5:61:f4:c2:83:60:d3:a9:22:e1:41:93:f0:0c:68:6e:2b:
         24:f5:c4:a4:74:cf:93:4c:7f:1e:36:e8:7b:bf:24:63:57:09:
         eb:32:6f:9b:f9:c0:52:17