Certificate authentication bindings and limitations
No content change seen yet. Watched since 5 Oct 23:18 UTC, last read today 00:28 UTC, next check 21 Oct 00:28 UTC. Microsoft's own edits are listed below.
Read the Microsoft source · Link to this observation · My radar
Timeline
From the capture of 5 Oct 23:18 UTC · an earlier observationLegacy capture: table structure or oversized sections are unavailable for extraction
Microsoft's revision log on this page · 44 entries
Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.
- Turn on issuer hintsRecommendation
- CA trust store update propagationRecommendation
- MFA with single-factor CBARequirement
SubjectKeyIdentifierIssuerAndSubjectCONTOSO-DC-CASHA1-PUKEYIssuerAndSerialNumber- Secure Microsoft Entra configuration by using multiple username bindingsRequirementExceptionRecommendation3 conditions
- Secure Microsoft Entra configuration by using multiple username bindingsRequirementException1 condition
SubjectKeyIdentifier - Support for one certificate with multiple Microsoft Entra user accounts (1:M)ExceptionScope2 conditions
IssuerAndSubjectIssuerAndSerialNumber- Support for one certificate with multiple Microsoft Entra user accounts (1:M)ScopeRecommendation2 conditions
IssuerAndSerialNumberSubjectKeyIssuer- Sign-in logsRecommendation
PolicyIdThis
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
No longer on the page Certificate Authority (CA) Scoping (Preview)Microsoft's source, commit d3da066
-
-
-
-
-
332 earlier changes
-
-
-
-
-
-
-
-
-
No longer on the page Achieve higher security with certificate bindingsMicrosoft's source, commit e8d2c3e
-
-
No longer on the page Certificate Authority (CA) Scoping (Preview)Microsoft's source, commit e8d2c3e
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Scope added SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit e8d2c3e
-
No longer on the page SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit e8d2c3e
-
-
-
No longer on the page Achieve higher security by using certificate bindingsMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit cb228ca
-
Scope added SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit cb228ca
-
No longer on the page Multiple authentication policy binding rulesMicrosoft's source, commit cb228ca
-
-
-
-
-
-
-
-
-
-
No longer on the page Achieve higher security with certificate bindingsMicrosoft's source, commit 2131faf
-
-
No longer on the page Certificate Authority (CA) Scoping (Preview)Microsoft's source, commit 2131faf
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Understanding the certificate revocation processMicrosoft's source, commit 2131faf
-
Scope added SHA1PublicKeyin Achieve higher security by using certificate bindingsMicrosoft's source, commit 2131faf
-
No longer on the page SHA1PublicKeyin Achieve higher security with certificate bindingsMicrosoft's source, commit 2131faf
-
-
Observed history and review priority
Captured 5 Oct 23:18 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 19
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 13 Oct 00:39 UTC · 64 candidates
- 5 Oct 23:18 UTC · 54 candidates
- 17 Apr 17:54 UTC · 61 candidates
- 31 Mar 21:25 UTC · 61 candidates
- 17 Mar 21:12 UTC · 61 candidates
- 22 Nov 2025 00:39 UTC · 61 candidates
- 3 Nov 2025 20:21 UTC · 61 candidates
- 12 Sep 2025 18:16 UTC · 61 candidates
- 21 Aug 2025 18:44 UTC · 61 candidates
- 14 Aug 2025 22:38 UTC · 70 candidates
- 14 Aug 2025 22:22 UTC · 70 candidates
- 7 Aug 2025 19:11 UTC · 49 candidates
- 7 Aug 2025 13:10 UTC · 68 candidates
- 7 Aug 2025 12:53 UTC · 68 candidates
- 6 Aug 2025 22:14 UTC · 68 candidates
- 6 Aug 2025 21:14 UTC · 68 candidates
- 25 Jun 2025 20:52 UTC · 59 candidates
- 5 Jun 2025 22:02 UTC · 59 candidates
- 5 Jun 2025 20:39 UTC · 59 candidates
Microsoft's edits
History on GitHubCommits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 19 Oct 23:56 UTC.
Related public evidence
No related evidence found in this installation's recent collection. This does not establish that no announcement exists.
Retained observations
- 13 Oct 00:39 UTC
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
- 5 Oct 23:18 UTC · shown above
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.