Azure certificate authority, CRL and OCSP endpoints
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 090b3e7 · +5 −1 lines · also on GitHub
⋯ 23 unchanged lines
2424
2525
- The Serial Number (top string in the table) contains the hexadecimal value of the certificate serial number.
2626
- The Thumbprint (bottom string in the table) is the SHA1 thumbprint.
27
−- For those CAs that must be downloaded over HTTP and not HTTPS, copy the link and paste into the URL field on a new tab.
27
+- For those CAs that must be downloaded over HTTP and not HTTPS, copy the link and paste into the URL field on a new tab.
28
+
29
+**How to find certificate validity (expiry) dates:**
30
+
31
+To determine when a certificate expires, download the certificate file and view its properties. On Windows, double-click the downloaded `.crt` file and check the **Valid from** and **Valid to** fields under the **General** tab. On Linux or macOS, use `openssl x509 -in <certificate-file> -noout -dates` to display the validity period. Root CAs typically have validity periods of 15-25 years, while subordinate CAs have shorter validity periods of 3-10 years.
2832
2933
# [Root and Subordinate CAs list](#tab/root-and-subordinate-cas-list)
3034
⋯ 345 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:08 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.