Microsoft ECC Root Certificate Authority 2017.crt: CN=Microsoft ECC Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US (Root Certificate, Expiring 2042-07-26) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: http://www.microsoft.com/pkiops/certs/archived/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt (in PEM format )
Serial Number : 150818021335295086679873615789918174631
SHA-1 Fingerprint : 7ca9013d43721551e987380b3eae4b442dc037ea
SHA-1 Fingerprint : 7c:a9:01:3d:43:72:15:51:e9:87:38:0b:3e:ae:4b:44:2d:c0:37:ea
SHA-256 Fingerprint : fea1884ab3aea6d0dbedbe4b9cd9fec8655116300a86a856488fc488bb4b44d2
SHA-256 Fingerprint : fe:a1:88:4a:b3:ae:a6:d0:db:ed:be:4b:9c:d9:fe:c8:65:51:16:30:0a:86:a8:56:48:8f:c4:88:bb:4b:44:d2
Signature Hash Algorithm : sha384
Subject : CN=Microsoft ECC Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
- Country Name: US (United States of America)
- State or Province Name: Washington
- Locality: Redmond
- Organization: Microsoft Corporation
- Common Name: Microsoft ECC Root Certificate Authority 2017
Not Valid Before: 2017-07-26 22:22:53
Not Valid After: 2042-07-26 22:31:47
Issuer (Parent Certificate):
- Issuer Name: CN=Microsoft ECC Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://www.microsoft.com/pkiops/Docs/Content/policy/Microsoft_PKI_Services_CP_v3.1.4.pdf
- Certificate Practice Statement (CPS) URL: Unknown
- Auditor: BDO International Limited
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=70ae9251-8e87-4ce4-963c-b712e66ee502
- Standard Audit Period Start Date: 2018.05.01
- Standard Audit Period End Date: 2019.04.30
- Standard Audit Statement Date: 2019.07.25
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: Unknown

Download certificate through curl:

curl -sSL "http://www.microsoft.com/pkiops/certs/archived/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www.microsoft.com/pkiops/certs/archived/Microsoft%20ECC%20Root%20Certificate%20Authority%202017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:76:7e:8d:58:e4:fc:96:49:c6:3e:fb:cf:3a:bd:a7
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017
        Validity
            Not Before: Jul 26 22:22:53 2017 GMT
            Not After : Jul 26 22:31:47 2042 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:d4:bc:3d:02:42:75:41:13:23:cd:80:04:86:02:
                    51:2f:6a:a8:81:62:0b:65:cc:f6:ca:9d:1e:6f:4a:
                    66:51:a2:03:d9:9d:91:fa:b6:16:b1:8c:6e:de:7c:
                    cd:db:79:a6:2f:ce:bb:ce:71:2f:e5:a5:ab:28:ec:
                    63:04:66:99:f8:fa:f2:93:10:05:e1:81:28:42:e3:
                    c6:68:f4:e6:1b:84:60:4a:89:af:ed:79:0f:3b:ce:
                    f1:f6:44:f5:01:78:c0
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                C8:CB:99:72:70:52:0C:F8:E6:BE:B2:04:57:29:2A:CF:42:10:ED:35
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:30:1a:11:55:61:19:fd:28:99:61:e2:2b:42:f3:1d:
         41:35:f3:49:ac:3a:79:e2:a5:60:1c:36:90:49:de:7f:5d:33:
         11:4e:c2:43:8d:b1:03:56:98:59:5d:a1:e9:1e:04:d6:02:31:
         00:c3:c6:be:1c:c3:7c:e7:f2:cd:59:43:6e:2a:8a:cf:7e:c4:
         44:4e:03:7a:92:11:3c:6a:45:b9:85:1e:54:cd:3a:1a:9e:90:
         b2:5e:c0:b9:8a:ea:be:8c:74:11:65:0b:02