Certificate authentication bindings and limitations
Timelines and exceptionsTimeline
From the capture of 22 Nov 2025 00:39 UTC · an earlier observationSource history: extracted from the page's source file at a commit; shared includes are not expanded
- 25 undated sections
- 40 with conditions
- 340 recorded changes
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
CONTOSO-DC-CAIssuerAndSerialNumberSHA1-PUKEYSubjectKeyIdentifierSubjectKeyIssuer
Requirements, exceptions and scope
- How does Microsoft Entra certificate-based authentication work?RequirementExceptionRecommendation9 conditions3 passages
SubjectKeyIdentifierSHA1-PUKEY- Secure Microsoft Entra configuration by using multiple username bindingsRequirementExceptionRecommendation5 conditions5 passages
SubjectKeyIdentifier IssuerAndSerialNumberCONTOSO-DC-CA- Support for one certificate with multiple Microsoft Entra user accounts (1:M)RequirementRecommendation1 condition2 passages
IssuerAndSerialNumberCONTOSO-DC-CAIssuerAndSerialNumberSubjectKeyIssuer- How CBA works with a Conditional Access authentication strength policyException2 conditions2 passages
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
328 earlier changes
-
-
-
-
-
No longer on the page Achieve higher security with certificate bindingsMicrosoft's source, commit e8d2c3e
-
-
No longer on the page Certificate Authority (CA) Scoping (Preview)Microsoft's source, commit e8d2c3e
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Scope added SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit e8d2c3e
-
No longer on the page SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit e8d2c3e
-
-
-
No longer on the page Achieve higher security by using certificate bindingsMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit cb228ca
-
Scope added SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
-
-
No longer on the page Achieve higher security with certificate bindingsMicrosoft's source, commit 2131faf
-
-
No longer on the page Certificate Authority (CA) Scoping (Preview)Microsoft's source, commit 2131faf
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
Scope added SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit 2131faf
-
No longer on the page SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit 2131faf
-
-
Observed history and review priority
Captured 22 Nov 2025 00:39 UTC; extracted 19 Oct 16:16 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/source-commit.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 19
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 13 Oct 00:39 UTC · 64 candidates
- 5 Oct 23:18 UTC · 54 candidates
- 17 Apr 17:54 UTC · 61 candidates
- 31 Mar 21:25 UTC · 61 candidates
- 17 Mar 21:12 UTC · 61 candidates
- 22 Nov 2025 00:39 UTC · 61 candidates
- 3 Nov 2025 20:21 UTC · 61 candidates
- 12 Sep 2025 18:16 UTC · 61 candidates
- 21 Aug 2025 18:44 UTC · 61 candidates
- 14 Aug 2025 22:38 UTC · 70 candidates
- 14 Aug 2025 22:22 UTC · 70 candidates
- 7 Aug 2025 19:11 UTC · 49 candidates
- 7 Aug 2025 13:10 UTC · 68 candidates
- 7 Aug 2025 12:53 UTC · 68 candidates
- 6 Aug 2025 22:14 UTC · 68 candidates
- 6 Aug 2025 21:14 UTC · 68 candidates
- 25 Jun 2025 20:52 UTC · 59 candidates
- 5 Jun 2025 22:02 UTC · 59 candidates
- 5 Jun 2025 20:39 UTC · 59 candidates