Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 01:40 UTC Customize Public modeDiscuss ChangeIntel on Discord

Certificate authentication bindings and limitations

Timelines and exceptions · All guidance changes

Entra · Official Microsoft guidanceObserved changes retained

Observed content change

The page title or its body outside the tracked passages changed. Review the source for its effect.

Read to decideThe wording changed without matching a rule; read the changed passages to decide.

Effect uncertain

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 13 Oct 00:39 UTC
Observed by ChangeIntel
13 Oct 00:39 UTC
Source update metadata
15 Jun 17:40 UTC
First observed on this installation
5 Oct 23:18 UTC
Last successful check
today 01:23 UTC
Next check due
27 Oct 01:23 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 13 Oct 00:39 UTC · an earlier observation

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

  • CONTOSO-DC-CA
  • IssuerAndSerialNumber
  • IssuerAndSubject
  • SHA1-PUKEY
  • SubjectKeyIdentifier
  • SubjectKeyIssuer

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

332 earlier changes
  1. Scope added SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit e8d2c3e
  2. No longer on the page SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit e8d2c3e
  3. No longer on the page SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit cb228ca
  4. Scope added SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit cb228ca
  5. Scope added SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit 2131faf
  6. No longer on the page SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit 2131faf
Observed history and review priority

Captured 13 Oct 00:39 UTC; extracted 22 Oct 18:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 20

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:51 UTC.

  1. [BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 4) (#13372) Metadata onlyServed on LearnView diff
  2. Merge branch 'main' into CBAGAChanges View diff
  3. CBA GA changes View diff
  4. Fix CA URL format in issuer hints section View diff
  5. Remove preview note for CBA as second factor View diff
  6. Clarify MFA capability with certificate-based authentication View diff
  7. fixed CRL faq View diff
  8. Merge branch 'main' into CRLChanges View diff
  9. fixes View diff
  10. edits per Shawn View diff
  11. creating new CRL page View diff
  12. edits View diff
  13. edits View diff
  14. edits View diff
  15. edit pass View diff
  16. Merge pull request #8609 from vimrang/CAScoping View diff
  17. Public doc for CA scoping View diff
  18. Public doc for CA scoping View diff
2 metadata-only edits · author, dates or topic labels, no article text
  1. [BULK UPDATE] Moves metadata to folder level in docfx.json. Metadata onlyView diff
  2. Updates Metadata onlyView diff

Retained observations

  • 24 Oct 01:13 UTC

    Source metadata changed; retained article content is unchanged.

  • 13 Oct 00:39 UTC · shown above
  • 5 Oct 23:18 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 01:40 UTC · 271 of 271 readable · 268 fully read · documentation 464/464 current