The 'Microsoft Azure RSA TLS Issuing CA 03' certificate is expiring

Thanks! I checked the cross-signed certificate, and it's valid until 26/08/2026. Is the standard certificate the replacement for the cross-signed version? I see the cross-signed issuer is DigiCert, but the standard issuer is Microsoft.

Correction: The certificate is actually Microsoft Azure RSA TLS Issuing CA 04, not 03. I got it from the link below

https://learn.microsoft.com/en-us/azure/security/fundamentals/azure-certificate-authority-details?tabs=root-and-subordinate-cas-list

Thanks! I checked the cross-signed certificate, and it's valid until 26/08/2026. Is the standard certificate the replacement for the cross-signed version? I see the cross-signed issuer is DigiCert, but the standard issuer is Microsoft.

Correction: The certificate is actually Microsoft Azure RSA TLS Issuing CA 04, not 03. I got it from the link below**

**https://learn.microsoft.com/en-us/azure/security/fundamentals/azure-certificate-authority-details?tabs=root-and-subordinate-cas-list

Hello Poornesh Purushotham,

The renewal file for the Microsoft Azure RSA TLS Issuing CA 03 certificate is published directly by Microsoft in their PKI repository. The official expiration date is 26 August 2026, and the discrepancy you are seeing (25 August vs 26 August) is due to local timezone conversion when the certificate validity is displayed. Certificates store their “Valid To” date in UTC, so depending on your system’s timezone, the date may appear one day earlier.

You can obtain the current certificate from Microsoft’s trusted download locations:

• Standard certificate: https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crt (microsoft.com in Bing)
• Cross‑signed certificate: https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt (microsoft.com in Bing)

After downloading, verify the validity period with openssl x509 -in <file>.crt -noout -dates or by checking the certificate properties in Windows. This will confirm the official expiration date and ensure your systems are aligned with Microsoft’s published CA details.

If my answer is useful for you, please hit Accept the answer to support me.

Thank you,

HL.