Office 365 encryption chains

Office 365 leverages a number of different certificate providers. The following describes the complete list of known Office 365 root certificates that customers may encounter when accessing Office 365. For information on the certificates you may need to install in your own infrastructure, see Plan for third-party SSL certificates for Office 365. The following certificate information applies to all worldwide and national cloud instances of Office 365.

Note

For certificate information that applies to DOD and GCC High customers, see Office 365 encryption chains - DOD and GCC High.

Certificate type P7b download CRL Endpoints OCSP Endpoints AIA Endpoints
Publicly Trusted Root Certificates Office 365 Root Certificate Bundle (P7B) crl.globalsign.net
www.d-trust.net
N/A N/A
Publicly Trusted Intermediate Certificates Office 365 Intermediate Certificate Bundle (P7B)​​ cdp1.public-trust.com
crl.cnnic.cn
crl.entrust.net
crl.globalsign.com
crl.globalsign.net
crl.identrust.com
crl.thawte.com
crl3.digicert.com
crl4.digicert.com
s1.symcb.com
www.d-trust.net
isrg.trustid.ocsp.identrust.com
ocsp.digicert.com
ocsp.entrust.net
ocsp.globalsign.com
ocsp.omniroot.com
ocsp.startssl.com
ocsp.thawte.com
ocsp2.globalsign.com
ocspcnnicroot.cnnic.cn
root-c3-ca2-2009.ocsp.d-trust.net
root-c3-ca2-ev-2009.ocsp.d-trust.net
s2.symcb.com
aia.startssl.com
apps.identrust.com
cacert.omniroot.com
www.cnnic.cn

Expand the root and intermediate sections below to see additional details about the certificate providers.

Office 365 Root Certificate Details

Baltimore CyberTrust Root

Subject CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 02:00:00:B9
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before May 12 18:46:00 2000 UTC
Validity Not After May 12 23:59:00 2025 UTC
Subject Key Identifier e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) D4DE20D05E66FC53FE1A50882C78DB2852CAE474
Thumbprint (SHA-256) 16AF57A9F676B0AB126095AA5EBADEF22AB31119D644AC95CD4B93DBF3F26AEB
Pin (SHA-256) Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o=

CNNIC ROOT

Subject CN=CNNIC ROOT
O=CNNIC
C=CN
Serial Number 49:33:00:01
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Apr 16 07:09:14 2007 UTC
Validity Not After Apr 16 07:09:14 2027 UTC
Subject Key Identifier 65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11
Authority Key Identifier keyid:65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11
Thumbprint (SHA-1) 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F
Thumbprint (SHA-256) E28393773DA845A679F2080CC7FB44A3B7A1C3792CB7EB7729FDCB6A8D99AEA7
Pin (SHA-256) H0IkzshPyZztiB/2/P0+IfjFGcVHqmpd094kcwLOUNE=

DigiCert Global Root CA

Subject CN=DigiCert Global Root CA
OU=www.digicert.com
O=DigiCert Inc
C=US
Serial Number 08:3B:E0:56:90:42:46:B1:A1:75:6A:C9:59:91:C7:4A
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Nov 10 00:00:00 2006 UTC
Validity Not After Nov 10 00:00:00 2031 UTC
Subject Key Identifier 03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55
Authority Key Identifier keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55
Thumbprint (SHA-1) A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
Thumbprint (SHA-256) 4348A0E9444C78CB265E058D5E8944B4D84F9662BD26DB257F8934A443C70161
Pin (SHA-256) r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=

DigiCert High Assurance EV Root CA

Subject CN=DigiCert High Assurance EV Root CA
OU=www.digicert.com
O=DigiCert Inc
C=US
Serial Number 02:AC:5C:26:6A:0B:40:9B:8F:0B:79:F2:AE:46:25:77
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Nov 10 00:00:00 2006 UTC
Validity Not After Nov 10 00:00:00 2031 UTC
Subject Key Identifier b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3
Authority Key Identifier keyid:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3
Thumbprint (SHA-1) 5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
Thumbprint (SHA-256) 7431E5F4C3C1CE4690774F0B61E05440883BA9A01ED00BA6ABD7806ED3B118CF
Pin (SHA-256) WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=

D-TRUST Root Class 3 CA 2 2009

Subject CN=D-TRUST Root Class 3 CA 2 2009
O=D-Trust GmbH
C=DE
Serial Number 09:83:F3
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Nov 05 08:35:58 2009 UTC
Validity Not After Nov 05 08:35:58 2029 UTC
Subject Key Identifier fd:da:14:c4:9f:30:de:21:bd:1e:42:39:fc:ab:63:23:49:e0:f1:84
Thumbprint (SHA-1) 58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0
Thumbprint (SHA-256) 49E7A442ACF0EA6287050054B52564B650E4F49E42E348D6AA38E039E957B1C1
Pin (SHA-256) 7KDxgUAs56hlKzG00DbfJH46MLf0GlDZHsT5CwBrQ6E=
CRL URLs ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl

D-TRUST Root Class 3 CA 2 EV 2009

Subject CN=D-TRUST Root Class 3 CA 2 EV 2009
O=D-Trust GmbH
C=DE
Serial Number 09:83:F4
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Nov 05 08:50:46 2009 UTC
Validity Not After Nov 05 08:50:46 2029 UTC
Subject Key Identifier d3:94:8a:4c:62:13:2a:19:2e:cc:af:72:8a:7d:36:d7:9a:1c:dc:67
Thumbprint (SHA-1) 96C91B0B95B4109842FAD0D82279FE60FAB91683
Thumbprint (SHA-256) EEC5496B988CE98625B934092EEC2908BED0B0F316C2D4730C84EAF1F3D34881
Pin (SHA-256) /zQvtsTIvTCkcG9zSJU58Z5uSMwF9GJUZU9mENvFQOk=
CRL URLs ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl

DST Root CA X3

Subject CN=DST Root CA X3
O=Digital Signature Trust Co.
Serial Number 44:AF:B0:80:D6:A3:27:BA:89:30:39:86:2E:F8:40:6B
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Sep 30 21:12:19 2000 UTC
Validity Not After Sep 30 14:01:15 2021 UTC
Subject Key Identifier c4:a7:b1:a4:7b:2c:71:fa:db:e1:4b:90:75:ff:c4:15:60:85:89:10
Thumbprint (SHA-1) DAC9024F54D8F6DF94935FB1732638CA6AD77C13
Thumbprint (SHA-256) 0687260331A72403D909F105E69BCF0D32E1BD2493FFC6D9206D11BCD6770739
Pin (SHA-256) Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=

Entrust Root Certification Authority - G2

Subject CN=Entrust Root Certification Authority - G2
OU="(c) 2009 Entrust, Inc. - for authorized use only"
OU=See www.entrust.net/legal-terms
O="Entrust, Inc."
C=US
Serial Number 4A:53:8C:28
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Jul 07 17:25:54 2009 UTC
Validity Not After Dec 07 17:55:54 2030 UTC
Subject Key Identifier 6a:72:26:7a:d0:1e:ef:7d:e7:3b:69:51:d4:6c:8d:9f:90:12:66:ab
Thumbprint (SHA-1) 8CF427FD790C3AD166068DE81E57EFBB932272D4
Thumbprint (SHA-256) 43DF5774B03E7FEF5FE40D931A7BEDF1BB2E6B42738C4E6D3841103D3AA7F339
Pin (SHA-256) du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=

Entrust.net Certification Authority (2048)

Subject CN=Entrust.net Certification Authority (2048)
OU=(c) 1999 Entrust.net Limited
OU=www.entrust.net/CPS_2048 incorp. by ref. (limit s liab.)
O=Entrust.net
Serial Number 38:63:DE:F8
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Dec 24 17:50:51 1999 UTC
Validity Not After Jul 24 14:15:12 2029 UTC
Subject Key Identifier 55:e4:81:d1:11:80:be:d8:89:b9:08:a3:31:f9:a1:24:09:16:b9:70
Thumbprint (SHA-1) 503006091D97D4F5AE39F7CBE7927D7D652D3431
Thumbprint (SHA-256) 6DC47172E01CBCB0BF62580D895FE2B8AC9AD4F873801E0C10B9C837D21EB177
Pin (SHA-256) HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg=

GlobalSign

Subject CN=GlobalSign
O=GlobalSign
OU=GlobalSign Root CA - R2
Serial Number 04:00:00:00:00:01:0F:86:26:E6:0D
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Dec 15 08:00:00 2006 UTC
Validity Not After Dec 15 08:00:00 2021 UTC
Subject Key Identifier 9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e
Authority Key Identifier keyid:9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e
Thumbprint (SHA-1) 75E0ABB6138512271C04F85FDDDE38E4B7242EFE
Thumbprint (SHA-256) CA42DD41745FD0B81EB902362CF9D8BF719DA1BD1B1EFC946F5B4C99F42C1B9E
Pin (SHA-256) iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=
CRL URLs http://crl.globalsign.net/root-r2.crl

GlobalSign Root CA

Subject CN=GlobalSign Root CA
OU=Root CA
O=GlobalSign nv-sa
C=BE
Serial Number 04:00:00:00:00:01:15:4B:5A:C3:94
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Sep 01 12:00:00 1998 UTC
Validity Not After Jan 28 12:00:00 2028 UTC
Subject Key Identifier 60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b
Thumbprint (SHA-1) B1BC968BD4F49D622AA89A81F2150152A41D829C
Thumbprint (SHA-256) EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99
Pin (SHA-256) K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=

thawte Primary Root CA - G3

Subject CN=thawte Primary Root CA - G3
OU="(c) 2008 thawte, Inc. - For authorized use only"
OU=Certification Services Division
O="thawte, Inc."
C=US
Serial Number 60:01:97:B7:46:A7:EA:B4:B4:9A:D6:4B:2F:F7:90:FB
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Apr 02 00:00:00 2008 UTC
Validity Not After Dec 01 23:59:59 2037 UTC
Subject Key Identifier ad:6c:aa:94:60:9c:ed:e4:ff:fa:3e:0a:74:2b:63:03:f7:b6:59:bf
Thumbprint (SHA-1) F18B538D1BE903B6A6F056435B171589CAF36BF2
Thumbprint (SHA-256) 4B03F45807AD70F21BFC2CAE71C9FDE4604C064CF5FFB686BAE5DBAAD7FDD34C
Pin (SHA-256) GQbGEk27Q4V40A4GbVBUxsN/D6YCjAVUXgmU7drshik=

VeriSign Class 3 Public Primary Certification Authority - G5

Subject CN=VeriSign Class 3 Public Primary Certification Authority - G5
OU="(c) 2006 VeriSign, Inc. - For authorized use only"
OU=VeriSign Trust Network
O="VeriSign, Inc."
C=US
Serial Number 18:DA:D1:9E:26:7D:E8:BB:4A:21:58:CD:CC:6B:3B:4A
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Nov 08 00:00:00 2006 UTC
Validity Not After Jul 16 23:59:59 2036 UTC
Subject Key Identifier 7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33
Thumbprint (SHA-1) 4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
Thumbprint (SHA-256) 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
Pin (SHA-256) JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=

Office 365 Intermediate Certificate Details

CNNIC SHA256 SSL

Subject CN=CNNIC SHA256 SSL
O=CNNIC SHA256 SSL
C=CN
Issuer CN=CNNIC ROOT
O=CNNIC
C=CN
Serial Number 49:33:00:7C
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Dec 18 12:32:18 2014 UTC
Validity Not After Dec 18 12:32:18 2024 UTC
Subject Key Identifier b7:d1:59:8b:8c:0d:06:28:47:23:00:3a:36:04:a5:ee:38:76:53:3c
Authority Key Identifier keyid:65:f2:31:ad:2a:f7:f7:dd:52:96:0a:c7:02:c1:0e:ef:a6:d5:3b:11
Thumbprint (SHA-1) FC844648FC708433921BE88B18C48787A3E2813E
Thumbprint (SHA-256) FA8B9F99DBB94E7B772AA9190846E777047C15C7A3BF4A1AF9C0CA984A689511
Pin (SHA-256) dKZRcLDh7hBNZTmTIHOGJ6C2Om/ITjUCPkOnLTnrZXk=
AIA URLs http://www.cnnic.cn/download/cert/CNNICROOT.cer
CRL URLs ldap:///CN=crl1,%20OU=crl,%20O=CNNIC,%20C=CN?certificateRevocationList;binary,authorityRevocationList;binary,deltaRevocationList;binary
http://crl.cnnic.cn/download/rootsha2crl/CRL1.crl
OCSP URLs http://ocspcnnicroot.cnnic.cn

D-TRUST SSL Class 3 CA 1 2009

Subject CN=D-TRUST SSL Class 3 CA 1 2009
O=D-Trust GmbH
C=DE
Issuer CN=D-TRUST Root Class 3 CA 2 2009
O=D-Trust GmbH
C=DE
Subject Alternative Name RFC822 Name=info@d-trust.net
URL=http://www.d-trust.net
Serial Number 09:90:63
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Nov 12 12:46:55 2009 UTC
Validity Not After Nov 05 08:35:58 2029 UTC
Subject Key Identifier 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a
Authority Key Identifier keyid:fd:da:14:c4:9f:30:de:21:bd:1e:42:39:fc:ab:63:23:49:e0:f1:84
Thumbprint (SHA-1) 2FC5DE6528CDBE50A14C382FC1DE524FAABF95FC
Thumbprint (SHA-256) 6AC159B4C2BC8E729F3B84642EF1286BCC80D775FE278C740ADA468D59439025
Pin (SHA-256) 9w0QP9HzLXkfs+4zENaUFq2XKcQON1oyksoJ+Gg2AZE=
CRL URLs ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl
OCSP URLs http://root-c3-ca2-2009.ocsp.d-trust.net

D-TRUST SSL Class 3 CA 1 EV 2009

Subject CN=D-TRUST SSL Class 3 CA 1 EV 2009
O=D-Trust GmbH
C=DE
Issuer CN=D-TRUST Root Class 3 CA 2 EV 2009
O=D-Trust GmbH
C=DE
Subject Alternative Name RFC822 Name=info@d-trust.net
URL=http://www.d-trust.net
Serial Number 09:90:64
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Nov 12 12:52:43 2009 UTC
Validity Not After Nov 05 08:50:46 2029 UTC
Subject Key Identifier ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4
Authority Key Identifier keyid:d3:94:8a:4c:62:13:2a:19:2e:cc:af:72:8a:7d:36:d7:9a:1c:dc:67
Thumbprint (SHA-1) 1069423D308D0FC54575059638560FC7556E32B3
Thumbprint (SHA-256) B0935DC04B4E60C0C42DEF7EC57A1B1D8F958D17988E71CC80A8CF5E635BA5B4
Pin (SHA-256) lv5BNZ5aWd27ooolULDolFTwIaaWjHvG4yyH3rss4X8=
CRL URLs ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl
OCSP URLs http://root-c3-ca2-ev-2009.ocsp.d-trust.net

DigiCert Cloud Services CA-1

Subject CN=DigiCert Cloud Services CA-1
O=DigiCert Inc
C=US
Issuer CN=DigiCert Global Root CA
OU=www.digicert.com
O=DigiCert Inc
C=US
Serial Number 01:9E:C1:C6:BD:3F:59:7B:B2:0C:33:38:E5:51:D8:77
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Aug 04 12:00:00 2015 UTC
Validity Not After Aug 04 12:00:00 2030 UTC
Subject Key Identifier dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7
Authority Key Identifier keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55
Thumbprint (SHA-1) 81B68D6CD2F221F8F534E677523BB236BBA1DC56
Thumbprint (SHA-256) 2F6889961A7CA7067E8BA103C2CF9B9A924F8CA293F11178E23A1978D2F133D3
Pin (SHA-256) UgpUVparimk8QCjtWQaUQ7EGrtrykc/L8N66EhFY3VE=
CRL URLs http://crl4.digicert.com/DigiCertGlobalRootCA.crl
http://crl3.digicert.com/DigiCertGlobalRootCA.crl
OCSP URLs http://ocsp.digicert.com

DigiCert SHA2 High Assurance Server CA

Subject CN=DigiCert SHA2 High Assurance Server CA
OU=www.digicert.com
O=DigiCert Inc
C=US
Issuer CN=DigiCert High Assurance EV Root CA
OU=www.digicert.com
O=DigiCert Inc
C=US
Serial Number 04:E1:E7:A4:DC:5C:F2:F3:6D:C0:2B:42:B8:5D:15:9F
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Oct 22 12:00:00 2013 UTC
Validity Not After Oct 22 12:00:00 2028 UTC
Subject Key Identifier 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Authority Key Identifier keyid:b1:3e:c3:69:03:f8:bf:47:01:d4:98:26:1a:08:02:ef:63:64:2b:c3
Thumbprint (SHA-1) A031C46782E6E6C662C2C87C76DA9AA62CCABD8E
Thumbprint (SHA-256) 19400BE5B7A31FB733917700789D2F0A2471C0C9D506C0E504C06C16D7CB17C0
Pin (SHA-256) k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws=
CRL URLs http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
OCSP URLs http://ocsp.digicert.com

DigiCert SHA2 Secure Server CA

Subject CN=DigiCert SHA2 Secure Server CA
O=DigiCert Inc
C=US
Issuer CN=DigiCert Global Root CA
OU=www.digicert.com
O=DigiCert Inc
C=US
Serial Number 01:FD:A3:EB:6E:CA:75:C8:88:43:8B:72:4B:CF:BC:91
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Mar 08 12:00:00 2013 UTC
Validity Not After Mar 08 12:00:00 2023 UTC
Subject Key Identifier 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Authority Key Identifier keyid:03:de:50:35:56:d1:4c:bb:66:f0:a3:e2:1b:1b:c3:97:b2:3d:d1:55
Thumbprint (SHA-1) 1FB86B1168EC743154062E8C9CC5B171A4B7CCB4
Thumbprint (SHA-256) 154C433C491929C5EF686E838E323664A00E6A0D822CCC958FB4DAB03E49A08F
Pin (SHA-256) 5kJvNEMw0KjrCAu7eXY5HZdvyCS13BbA0VJG1RSP91w=
CRL URLs http://crl3.digicert.com/DigiCertGlobalRootCA.crl
http://crl4.digicert.com/DigiCertGlobalRootCA.crl
OCSP URLs http://ocsp.digicert.com

Entrust Certification Authority - L1C

Subject CN=Entrust Certification Authority - L1C
OU="(c) 2009 Entrust, Inc."
OU=www.entrust.net/rpa is incorporated by reference
O="Entrust, Inc."
C=US
Issuer CN=Entrust.net Certification Authority (2048)
OU=(c) 1999 Entrust.net Limited
OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)
O=Entrust.net
Serial Number 4C:0E:8C:39
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha1RSA
Validity Not Before Nov 11 15:40:40 2011 UTC
Validity Not After Nov 12 02:51:17 2021 UTC
Subject Key Identifier 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d
Authority Key Identifier keyid:55:e4:81:d1:11:80:be:d8:89:b9:08:a3:31:f9:a1:24:09:16:b9:70
Thumbprint (SHA-1) C53E73073F93CE7895DE7484126BC303DAB9E657
Thumbprint (SHA-256) 0EE4DAF71A85D842D23F4910FD4C909B7271861931F1D5FEAC868225F52700E2
Pin (SHA-256) VFv5NemtodoRftw8KsvFb8AoCWwOJL6bOJS+Ui0bQ94=
CRL URLs http://crl.entrust.net/2048ca.crl
OCSP URLs http://ocsp.entrust.net

Entrust Certification Authority - L1K

Subject CN=Entrust Certification Authority - L1K
OU="(c) 2012 Entrust, Inc. - for authorized use only"
OU=See www.entrust.net/legal-terms
O="Entrust, Inc."
C=US
Issuer CN=Entrust Root Certification Authority - G2
OU="(c) 2009 Entrust, Inc. - for authorized use only"
OU=See www.entrust.net/legal-terms
O="Entrust, Inc."
C=US
Serial Number 0E:E9:4C:C3:00:00:00:00:51:D3:77:85
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Oct 05 19:13:56 2015 UTC
Validity Not After Dec 05 19:43:56 2030 UTC
Subject Key Identifier 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Authority Key Identifier keyid:6a:72:26:7a:d0:1e:ef:7d:e7:3b:69:51:d4:6c:8d:9f:90:12:66:ab
Thumbprint (SHA-1) F21C12F46CDB6B2E16F09F9419CDFF328437B2D7
Thumbprint (SHA-256) 13EFB39A2F6654E8C67BD04F4C6D4C90CD6CAB5091BCEDC73787F6B77D3D3FE7
Pin (SHA-256) 980Ionqp3wkYtN9SZVgMzuWQzJta1nfxNPwTem1X0uc=
CRL URLs http://crl.entrust.net/g2ca.crl
OCSP URLs http://ocsp.entrust.net

GlobalSign

Subject CN=GlobalSign
O=GlobalSign
OU=GlobalSign Root CA - R3
Issuer CN=GlobalSign Root CA
OU=Root CAO=GlobalSign nv-sa
C=BE
Serial Number 04:00:00:00:00:01:25:07:1D:F9:AF
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Nov 18 10:00:00 2009 UTC
Validity Not After Mar 18 10:00:00 2019 UTC
Subject Key Identifier 8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc
Authority Key Identifier keyid:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b
Thumbprint (SHA-1) 4765557AF418C68A641199146A7E556AA8242996
Thumbprint (SHA-256) FDFC6560B09C237F468B8130EB90996FF85FA13FA266239B8D5863798D6AB898
Pin (SHA-256) cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=
CRL URLs http://crl.globalsign.net/root.crl
OCSP URLs http://ocsp.globalsign.com/ExtendedSSLSHA256CACross

GlobalSign Extended Validation CA - SHA256 - G2

Subject CN=GlobalSign Extended Validation CA - SHA256 - G2
O=GlobalSign nv-sa
C=BE
Issuer CN=GlobalSign
O=GlobalSign
OU=GlobalSign Root CA - R2
Serial Number 04:00:00:00:00:01:44:4E:F0:4A:55
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Feb 20 10:00:00 2014 UTC
Validity Not After Dec 15 08:00:00 2021 UTC
Subject Key Identifier da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02
Authority Key Identifier keyid:9b:e2:07:57:67:1c:1e:c0:6a:06:de:59:b4:9a:2d:df:dc:19:86:2e
Thumbprint (SHA-1) 65BE102BE26928650E0EF54DC8F4F15AF5F98E8B
Thumbprint (SHA-256) 24F91C0705A0A5338641B365FB0D9D9709B56297CFF1857E73C02C1636D486AA
Pin (SHA-256) LvRiGEjRqfzurezaWuj8Wie2gyHMrW5Q06LspMnox7A=
CRL URLs http://crl.globalsign.net/root-r2.crl
OCSP URLs http://ocsp.globalsign.com/rootr2

GlobalSign Extended Validation CA - SHA256 - G3

Subject CN=GlobalSign Extended Validation CA - SHA256 - G3
O=GlobalSign nv-sa
C=BE
Issuer CN=GlobalSign
O=GlobalSign
OU=GlobalSign Root CA - R3
Serial Number 48:A4:02:DD:27:92:0D:A2:08:34:9D:D1:99:7B
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Sep 21 00:00:00 2016 UTC
Validity Not After Sep 21 00:00:00 2026 UTC
Subject Key Identifier dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d
Authority Key Identifier keyid:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc
Thumbprint (SHA-1) 6023192FE7B59D2789130A9FE4094F9B5570D4A2
Thumbprint (SHA-256) AED5DD9A5339685DFB029F6D89A14335A96512C3CACC52B2994AF8B6B37FA4D2
Pin (SHA-256) 86fLIetopQLDNxFZ0uMI66Xpl1pFgLlHHn9v6kT0i4I=
CRL URLs http://crl.globalsign.com/root-r3.crl
OCSP URLs http://ocsp2.globalsign.com/rootr3

GlobalSign Organization Validation CA - SHA256 - G2

Subject CN=GlobalSign Organization Validation CA - SHA256 - G2
O=GlobalSign nv-sa
C=BE
Issuer CN=GlobalSign
O=GlobalSign
OU=GlobalSign Root CA - R3
Serial Number 04:00:00:00:00:01:31:89:C6:44:C9
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Aug 02 10:00:00 2011 UTC
Validity Not After Aug 02 10:00:00 2022 UTC
Subject Key Identifier 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Authority Key Identifier keyid:8f:f0:4b:7f:a8:2e:45:24:ae:4d:50:fa:63:9a:8b:de:e2:dd:1b:bc
Thumbprint (SHA-1) EF90B2B86F4756EBE7D36FF3015D63523A0076E9
Thumbprint (SHA-256) 0B339212D7CFF17A2C59E35669B58E77350133750A78DA9404770EDD470DEF76
Pin (SHA-256) IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=
CRL URLs http://crl.globalsign.net/root-r3.crl
OCSP URLs http://ocsp2.globalsign.com/rootr3

GlobalSign Organization Validation CA - SHA256 - G2

Subject CN=GlobalSign Organization Validation CA - SHA256 - G2
O=GlobalSign nv-sa
C=BE
Issuer CN=GlobalSign Root CA
OU=Root CA
O=GlobalSign nv-sa
C=BE
Serial Number 04:00:00:00:00:01:44:4E:F0:42:47
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Feb 20 10:00:00 2014 UTC
Validity Not After Feb 20 10:00:00 2024 UTC
Subject Key Identifier 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Authority Key Identifier keyid:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b
Thumbprint (SHA-1) 902EF2DEEB3C5B13EA4C3D5193629309E231AE55
Thumbprint (SHA-256) 74EF335E5E18788307FB9D89CB704BEC112ABD23487DBFF41C4DED5070F241D9
Pin (SHA-256) IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=
CRL URLs http://crl.globalsign.net/root.crl
OCSP URLs http://ocsp.globalsign.com/rootr1

GlobalSign Organization Validation CA - SHA256 - G2

Subject CN=GlobalSign Organization Validation CA - SHA256 - G2
O=GlobalSign nv-sa
C=BE
Issuer CN=GlobalSign Root CA
OU=Root CA
O=GlobalSign nv-sa
C=BE
Serial Number 04:00:00:00:00:01:44:4E:F0:42:47
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Feb 20 10:00:00 2014 UTC
Validity Not After Feb 20 10:00:00 2024 UTC
Subject Key Identifier 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Authority Key Identifier keyid:60:7b:66:1a:45:0d:97:ca:89:50:2f:7d:04:cd:34:a8:ff:fc:fd:4b
Thumbprint (SHA-1) 902EF2DEEB3C5B13EA4C3D5193629309E231AE55
Thumbprint (SHA-256) 74EF335E5E18788307FB9D89CB704BEC112ABD23487DBFF41C4DED5070F241D9
Pin (SHA-256) IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=
CRL URLs http://crl.globalsign.net/root.crl
OCSP URLs http://ocsp.globalsign.com/rootr1

Let's Encrypt Authority X3

Subject CN=Let's Encrypt Authority X3
O=Let's Encrypt
C=US
Issuer CN=DST Root CA X3
O=Digital Signature Trust Co.
Serial Number 0A:01:41:42:00:00:01:53:85:73:6A:0B:85:EC:A7:08
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Mar 17 16:40:46 2016 UTC
Validity Not After Mar 17 16:40:46 2021 UTC
Subject Key Identifier a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Authority Key Identifier keyid:c4:a7:b1:a4:7b:2c:71:fa:db:e1:4b:90:75:ff:c4:15:60:85:89:10
Thumbprint (SHA-1) E6A3B45B062D509B3382282D196EFE97D5956CCB
Thumbprint (SHA-256) 25847D668EB4F04FDD40B12B6B0740C567DA7D024308EB6C2C96FE41D9DE218D
Pin (SHA-256) YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=
AIA URLs http://apps.identrust.com/roots/dstrootcax3.p7c
CRL URLs http://crl.identrust.com/DSTROOTCAX3CRL.crl
OCSP URLs http://isrg.trustid.ocsp.identrust.com

Microsoft IT SSL SHA2

Subject CN=Microsoft IT SSL SHA2
OU=Microsoft IT
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 07:27:9A:A9
Public Key Length RSA 4096 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Dec 19 20:07:32 2013 UTC
Validity Not After Dec 19 20:06:55 2017 UTC
Subject Key Identifier 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) 948E1652586240D453287AB69CAEB8F2F4F02117
Thumbprint (SHA-256) 34BD941A06ED10E2FAC8459F79E4748C1EA08F142C6DE5E557884D0D3CE249FA
Pin (SHA-256) CzdPous1hY3sIkO55pUH7vklXyIHVZAl/UnprSQvpEI=
CRL URLs http://cdp1.public-trust.com/CRL/Omniroot2025.crl

Microsoft IT SSL SHA2

Subject CN=Microsoft IT SSL SHA2
OU=Microsoft IT
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 07:27:AA:47
Public Key Length RSA 4096 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before May 07 17:04:09 2014 UTC
Validity Not After May 07 17:03:30 2018 UTC
Subject Key Identifier 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) 97EFF3028677894BDD4F9AC53F789BEE5DF4AD86
Thumbprint (SHA-256) 2399983E99703EBD01CEA466C10799810C4BA62A8D61B88170A334DCD61BB20F
Pin (SHA-256) CzdPous1hY3sIkO55pUH7vklXyIHVZAl/UnprSQvpEI=
CRL URLs http://cdp1.public-trust.com/CRL/Omniroot2025.crl
OCSP URLs http://ocsp.omniroot.com/baltimoreroot

Microsoft IT TLS CA 1

Subject CN=Microsoft IT TLS CA 1
OU=Microsoft IT
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 08:B8:7A:50:1B:BE:9C:DA:2D:16:4D:3E:39:51:BF:55
Public Key Length RSA 4096 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before May 20 12:51:28 2016 UTC
Validity Not After May 20 12:51:28 2024 UTC
Subject Key Identifier 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) 417E225037FBFAA4F95761D5AE729E1AEA7E3A42
Thumbprint (SHA-256) 4FF404F02E2CD00188F15D1C00F4B6D1E38B5A395CF85314EAEBA855B6A64B75
Pin (SHA-256) xjXxgkOYlag7jCtR5DreZm9b61iaIhd+J3+b2LiybIw=
CRL URLs http://crl3.digicert.com/Omniroot2025.crl
OCSP URLs http://ocsp.digicert.com

Microsoft IT TLS CA 2

Subject CN=Microsoft IT TLS CA 2
OU=Microsoft IT
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 0F:2C:10:C9:5B:06:C0:93:7F:B8:D4:49:F8:3E:85:69
Public Key Length RSA 4096 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before May 20 12:51:57 2016 UTC
Validity Not After May 20 12:51:57 2024 UTC
Subject Key Identifier 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) 54D9D20239080C32316ED9FF980A48988F4ADF2D
Thumbprint (SHA-256) 4E107C981B42ACBE41C01067E16D44DB64814D4193E572317EA04B87C79C475F
Pin (SHA-256) wBdPad95AU7OgLRs0FU/E6ILO1MSCM84kJ9y0H+TT7s=
CRL URLs http://crl3.digicert.com/Omniroot2025.crl
OCSP URLs http://ocsp.digicert.com

Microsoft IT TLS CA 4

Subject CN=Microsoft IT TLS CA 4
OU=Microsoft IT
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 0B:6A:B3:B0:3E:B1:A9:F6:C4:60:92:6A:A8:CD:FE:B3
Public Key Length RSA 4096 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before May 20 12:52:38 2016 UTC
Validity Not After May 20 12:52:38 2024 UTC
Subject Key Identifier 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) 8A38755D0996823FE8FA3116A277CE446EAC4E99
Thumbprint (SHA-256) 5FFAC43E0DDC5B4AF2B696F6BC4DB7E91DF314BB8FE0D0713A0B1A7AD2A68FAC
Pin (SHA-256) wUY9EOTJmS7Aj4fDVCu/KeE++mV7FgIcbn4WhMz1I2k=
CRL URLs http://crl3.digicert.com/Omniroot2025.crl
OCSP URLs http://ocsp.digicert.com

Microsoft IT TLS CA 5

Subject CN=Microsoft IT TLS CA 5
OU=Microsoft IT
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 08:88:CD:52:5F:19:24:44:4D:14:A5:82:91:DE:B9:52
Public Key Length RSA 4096 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before May 20 12:53:03 2016 UTC
Validity Not After May 20 12:53:03 2024 UTC
Subject Key Identifier 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) AD898AC73DF333EB60AC1F5FC6C4B2219DDB79B7
Thumbprint (SHA-256) F0EE5914ED94C7252D058B4E39808AEE6FA8F62CF0974FB7D6D2A9DF16E3A87F
Pin (SHA-256) RCbqB+W8nwjznTeP4O6VjqcwdxIgI79eBpnBKRr32gc=
CRL URLs http://crl3.digicert.com/Omniroot2025.crl
OCSP URLs http://ocsp.digicert.com

Symantec Class 3 EV SSL CA - G3

Subject CN=Symantec Class 3 EV SSL CA - G3
OU=Symantec Trust Network
O=Symantec Corporation
C=US
Issuer CN=VeriSign Class 3 Public Primary Certification Authority - G5
OU="(c) 2006 VeriSign, Inc. - For authorized use only"
OU=VeriSign Trust Network
O="VeriSign, Inc."
C=US
Subject Alternative Name Directory Address: CN=SymantecPKI-1-533
Serial Number 7E:E1:4A:6F:6F:EF:F2:D3:7F:3F:AD:65:4D:3A:DA:B4
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Oct 31 00:00:00 2013 UTC
Validity Not After Oct 30 23:59:59 2023 UTC
Subject Key Identifier 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a
Authority Key Identifier keyid:7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33
Thumbprint (SHA-1) E3FC0AD84F2F5A83ED6F86F567F8B14B40DCBF12
Thumbprint (SHA-256) 9E6BC5F9ECC52460E8EDC02C644D1BE1CB9F2316F41DAF3B616A0B2058294B31
Pin (SHA-256) gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E=
CRL URLs http://s1.symcb.com/pca3-g5.crl
OCSP URLs http://s2.symcb.com

Symantec Class 3 Secure Server CA - G4

Subject CN=Symantec Class 3 Secure Server CA - G4
OU=Symantec Trust Network
O=Symantec Corporation
C=US
Issuer CN=VeriSign Class 3 Public Primary Certification Authority - G5
OU="(c) 2006 VeriSign, Inc. - For authorized use only"
OU=VeriSign Trust Network
O="VeriSign, Inc."
C=US
Subject Alternative Name Directory Address: CN=SymantecPKI-1-534
Serial Number 51:3F:B9:74:38:70:B7:34:40:41:8D:30:93:06:99:FF
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Oct 31 00:00:00 2013 UTC
Validity Not After Oct 30 23:59:59 2023 UTC
Subject Key Identifier 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Authority Key Identifier keyid:7f:d3:65:a7:c2:dd:ec:bb:f0:30:09:f3:43:39:fa:02:af:33:31:33
Thumbprint (SHA-1) FF67367C5CD4DE4AE18BCCE1D70FDABD7C866135
Thumbprint (SHA-256) EAE72EB454BF6C3977EBD289E970B2F5282949190093D0D26F98D0F0D6A9CF17
Pin (SHA-256) 9n0izTnSRF+W4W4JTq51avSXkWhQB8duS2bxVLfzXsY=
CRL URLs http://s1.symcb.com/pca3-g5.crl
OCSP URLs http://s2.symcb.com

thawte SHA256 SSL CA

Subject CN=thawte SHA256 SSL CA
O="thawte, Inc."
C=US
Issuer CN=thawte Primary Root CA - G3
OU="(c) 2008 thawte, Inc. - For authorized use only"
OU=Certification Services Division
O="thawte, Inc."
C=US
Subject Alternative Name Directory Address: CN=VeriSignMPKI-2-415
Serial Number 36:34:9E:18:C9:9C:26:69:B6:56:2E:6C:E5:AD:71:32
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before May 23 00:00:00 2013 UTC
Validity Not After May 22 23:59:59 2023 UTC
Subject Key Identifier 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Authority Key Identifier keyid:ad:6c:aa:94:60:9c:ed:e4:ff:fa:3e:0a:74:2b:63:03:f7:b6:59:bf
Thumbprint (SHA-1) 67D147D5DAB7F28D663CA5B7A9568F087427B9F7
Thumbprint (SHA-256) 3F3AF9C9CC2C7599EF8F6DD7CA516CFC1797D7D12002254F3BFD0D4D0FE9DE86
Pin (SHA-256) /36ymPAVaJl3QDyB1lUkVf9GqJNug0R8JJPDN6348p8=
CRL URLs http://crl.thawte.com/ThawtePCA-G3.crl
OCSP URLs http://ocsp.thawte.com

Verizon Akamai SureServer CA G14-SHA2

Subject CN=Verizon Akamai SureServer CA G14-SHA2
OU=Cybertrust
O=Verizon Enterprise Solutions
L=Amsterdam
C=NL
Issuer CN=Baltimore CyberTrust Root
OU=CyberTrust
O=Baltimore
C=IE
Serial Number 07:27:A4:6B
Public Key Length RSA 2048 bits (e 65537)
Signature Algorithm sha256RSA
Validity Not Before Apr 02 14:36:10 2014 UTC
Validity Not After Apr 02 14:35:52 2021 UTC
Subject Key Identifier f8:bd:fa:af:73:77:c6:c7:1b:f9:4b:4d:11:a7:d1:33:af:af:72:11
Authority Key Identifier keyid:e5:9d:59:30:82:47:58:cc:ac:fa:08:54:36:86:7b:3a:b5:04:4d:f0
Thumbprint (SHA-1) 6AD2B04E2196E48BF685752890E811CD2ED60606
Thumbprint (SHA-256) 7373D219B42547E41BCB752BCBCBE93F592FF6F99C340CE57B73D38C3EC0BA98
Pin (SHA-256) 8XFPrRr4VxmEIYKUu35QtR3oGbduX1AlrBzaBUHgp7c=
AIA URLs https://cacert.omniroot.com/baltimoreroot.crt
https://cacert.omniroot.com/baltimoreroot.der
CRL URLs http://cdp1.public-trust.com/CRL/Omniroot2025.crl
OCSP URLs http://ocsp.omniroot.com/baltimoreroot

Additional certificate paths

The following list includes legacy certificates that aren't included above and will be merged with the list above over time.

evsecure-aia.verisign.com
sa.symcb.com
sd.symcb.com
*.omniroot.com
*.verisign.com
*.symcb.com
*.symcd.com
*.verisign.net
*.geotrust.com
*.entrust.net
*.public-trust.com
EVIntl-ocsp.verisign.com
EVSecure-ocsp.verisign.com
isrg.trustid.ocsp.identrust.com
ocsp.digicert.com
ocsp.entrust.net
ocsp.globalsign.com/ExtendedSSLSHA256CACross
ocsp.globalsign.com/rootr1
ocsp.globalsign.com/rootr2
ocsp2.globalsign.com/rootr3
ocsp.int-x3.letsencrypt.org/
ocsp.msocsp.com
ocsp.omniroot.com/baltimoreroot
ocsp2.globalsign.com/gsextendvalsha2g3r3
ocsp2.globalsign.com/gsorganizationvalsha2g2
ocsp2.globalsign.com/gsorganizationvalsha2g3
ocsp2.globalsign.com/rootr3
ocspx.digicert.com
s2.symcb.com
sr.symcd.com
su.symcd.com
vassg142.ocsp.omniroot.com
cdp1.public-trust.com/CRL/Omniroot2025.crl
crl.entrust.net/2048ca.crl
crl.entrust.net/g2ca.crl
crl.entrust.net/level1k.crl
crl.entrust.net/rootca1.crl
crl.globalsign.com/gs/gsextendvalsha2g3r3.crl
crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
crl.globalsign.com/gsorganizationvalsha2g3.crl
crl.globalsign.com/root.crl
crl.globalsign.net/root-r2.crl
crl.globalsign.com/root-r3.crl
crl.globalsign.net/root.crl
crl.identrust.com/DSTROOTCAX3CRL.crl
crl.microsoft.com/pki/mscorp/crl/msitwww1.crl
crl.microsoft.com/pki/mscorp/crl/msitwww2.crl
crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
crl3.digicert.com/DigiCertGlobalRootCA.crl
crl3.digicert.com/sha2-ev-server-g1.crl
crl3.digicert.com/sha2-ha-server-g5.crl
crl3.digicert.com/ssca-sha2-g5.crl
crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl
crl4.digicert.com/DigiCertGlobalRootCA.crl
crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
crl4.digicert.com/sha2-ev-server-g1.crl
crl4.digicert.com/sha2-ha-server-g5.crl
crl4.digicert.com/ssca-sha2-g5.crl
EVIntl-crl.verisign.com/EVIntl2006.crl
EVSecure-crl.verisign.com/pca3-g5.crl
mscrl.microsoft.com/pki/mscorp/crl/msitwww1.crl
mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
s1.symcb.com/pca3-g5.crl
sr.symcb.com/sr.crl
su.symcb.com/su.crl
vassg142.crl.omniroot.com/vassg142.crl
aia.entrust.net/l1k-chain256.cer
apps.identrust.com/roots/dstrootcax3.p7c
https://cacert.a.omniroot.com/vassg142.crt
https://cacert.a.omniroot.com/vassg142.der
https://cacert.omniroot.com/baltimoreroot.crt
https://cacert.omniroot.com/baltimoreroot.der
cacerts.digicert.com/DigiCertCloudServicesCA-1.crt
cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
cert.int-x3.letsencrypt.org/
EVIntl-aia.verisign.com/EVIntl2006.cer
secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt
secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt
secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
sr.symcb.com/sr.crt
su.symcb.com/su.crt
https://www.digicert.com/CACerts/DigiCertGlobalRootCA.crt
https://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.crt
https://www.microsoft.com/pki/mscorp/msitwww1.crt
https://www.microsoft.com/pki/mscorp/msitwww2.crt