2023年6月27日发(作者：)

Windows® Phone 7 for IT professionals

Windows® Phone 7 root certificates

This article is part of an ongoing series designed to help IT pros evaluate Windows Phone 7 and understand

how it can play a role in their organization. The articles in this series will focus on different topics of interest,

such as the architecture of Windows Phone 7, using Windows Phone 7 devices with other applications such as

Microsoft® Exchange and Microsoft SharePoint®, security, and management.

This article lists all certification authorities (CAs) and their root certificates that are pre-installed on

Windows Phone 7 devices. Certificates bind a user’s or device’s identity to a pair of electronic keys that can be

used to encrypt and sign digital information. CAs vouch for the identity of the certificate holder, and

certificates enable secure client communications with websites and services.

The tables in this article list certificates by the current CA—that is, the CA that currently operates the CA root

name with the unique thumbprint and CA root expiration date that is indicated in the tables. However, CA

root certificates can change ownership. These tables identify the current CA owner at the time this article was

published. You can get additional information about the root certificates and certificate policies by clicking

the provided links to the CA’s websites listed below.

Each CA lists a country or region, which is the current country or region from which the CA operates.

Additional information about certificates is available in the “Windows Phone 7 and certificates” article on the

Windows Phone 7 Guides for IT Professionals page on the Microsoft Download Center.

Microsoft is reproducing this information to the best of its ability, and its accuracy is not warranted or

guaranteed in any way. To confirm actual root certificate details, go to the certification authority’s website.

1

Definitions

Term

CA Root

Name

CA Root Size

Description

The common name applied to the root certificate, which might or might not also indicate

the name of the CA.

The modulus of the Rivest, Shamir, and Adleman (RSA) algorithm (typically 2048-bit or

4096-bit RSA). You might see reference to other algorithms such as Elliptic Curve

Cryptography (ECC) or Elliptic Curve Digital Signature Algorithm (ECDSA).

The hash algorithm chosen by the CA for this root certificate—Message Digest Algorithm 2

(MD2), Message Digest Algorithm 5 (MD5), Secure Hash Algorithm 1 (SHA1), or SHA2

(SHA256). The hash algorithm used to issue end-use certificates might not be the same as

the hash algorithm used for the root certificate: for example, as of January 15, 2009

Microsoft has no knowledge of any CA issuing MD5 end-use certificates from any MD5 root

certificate distributed by the Windows Root Certificate Program.

The expiration date of the root certificate, after which the CA cannot issue any more end-use

certificates from it. Root certificates are typically kept in distribution after expiration by the

Windows Phone and CE Root Certificate Program until the last of these end-use certificates

expires.

The hash value that uniquely identifies the root certificate in question. It can be confirmed in

the actual root certificate by examining the certificate properties in the Thumbprint field.

OEG 5.1.1 12/2010

Signature

Hash

CA Root

Expires

Thumbprint

Windows® Phone 7 for IT professionals

AOL (United States)

The following table lists the pre-installed SSL root certificates from AOL.

CA root name CA root size Signature CA root

hash expires

America Online Root

4096 SHA1 09/27/2037

Certification Authority 2

America Online Root

2048 SHA1 11/19/2037

Certification Authority 1

Thumbprint

85 b5 ff 67 9b 0c 79 96 1f c8 6e 44

22 00 46 13 db 17 92 84

39 21 c1 15 c1 5d 0e ca 5c cb 5b c4

f0 7d 21 d8 05 0b 56 6a

2

Comodo (United States)

The following table lists the pre-installed SSL root certificates from Comodo.

CA root name CA root size Signature CA root Thumbprint

hash expires

COMODO RSA

4096 SHA1 11/18/2038 af e5 d2 44 a8 d1 19 42 30 ff 47 9f

Certification Authority

e2 f8 97 bb cd 7a 8c b4

USERTrust RSA

4096 SHA1 11/18/2038 2b 8f 1b 57 33 0d bb a2 d0 7a 6c

Certification Authority

51 f7 0e e9 0d da b9 ad 8e

COMODO ECC

ECDSA384 SHA1 12/31/2028 9f 74 4e 9f 2b 4d ba ec 0f 31 2c 50

Certification Authority

b6 56 3b 8e 2d 93 c3 11

USERTrust ECC

ECC SHA1 01/18/2038 d1 cb ca 5d b2 d5 2a 7f 69 3b 67

Certification Authority

secp384r1 4d e5 f0 5a 1d 0c 95 7d f0

(NIST P-384)

UTN-USERFirst-Hardware 2048 SHA1 07/09/2019 04 83 ed 33 99 ac 36 08 05 87 22

ed bc 5e 46 00 e3 be f9 d7

UTN - DATACorp SGC 2048 SHA1 06/24/2019 58 11 9f 0e 12 82 87 ea 50 fd d9 87

45 6f 4f 78 dc fa d6 d4

AddTrust External CA

2048 SHA1 05/30/2020 02 fa f3 e2 91 43 54 68 60 78 57 69

Root

4d f5 e4 5b 68 85 18 68

DigiCert (United States)

The following table lists the pre-installed SSL root certificates from DigiCert.

CA root name CA root size Signature CA root Thumbprint

hash expires

DigiCert Assured ID Root

2048 SHA1 11/09/2031 05 63 b8 63 0d 62 d7 5a bb c8 ab

CA

1e 4b df b5 a8 99 b2 4d 43

DigiCert High Assurance

2048 SHA1 11/09/2031 5f b7 ee 06 33 e2 59 db ad 0c 4c

EV Root CA

9a e6 d3 8f 1a 61 c7 dc 25

DigiCert Global Root CA 4096 SHA1 11/09/2031 a8 98 5d 3a 65 e5 e5 c4 b2 d7 d6

6d 40 c6 dd 2f b1 9c 54 36

OEG 5.1.1 12/2010

Windows® Phone 7 for IT professionals

Entrust (Canada)

The following table lists the pre-installed SSL root certificates from Entrust.

CA root name CA root Signature CA root Thumbprint

size hash expires

Certification

2048 SHA1 12/24/2019 80 1d 62 d0 7b 44 9d 5c 5c 03 5c

Authority (2048)

98 ea 61 fa 44 3c 2a 58 fe

Secure Server

1024 SHA1 05/25/2010 99 a6 9b e6 1a fe 88 6b 4d 2b 82

Certification Authority

00 7c b8 54 fc 31 7e 15 39

3

GlobalSign (United Kingdom)

The following table lists the pre-installed SSL root certificates from GlobalSign.

CA root name CA root Signature CA root Thumbprint

size hash expires

GlobalSign Root

CA - R1

GlobalSign Root

CA - R2

GlobalSign Root

CA – R3

GlobalSign Root

CA

2048

2048

2048

2048

SHA1

SHA1

SHA1

SHA1

12/08/2028

12/15/2021

03/18/2029

01/28/2020

b1 bc 96 8b d4 f4 9d 62 2a a8 9a 81 f2 15

01 52 a4 1d 82 9c

75 e0 ab b6 13 85 12 27 1c 04 f8 5f dd de

38 e4 b7 24 2e fe

d6 9b 56 11 48 f0 1c 77 c5 45 78 c1 09 26

df 5b 85 69 76 ad

2f 17 3f 7d e9 96 67 af a5 7a f8 0a a2 d1

b1 2f ac 83 03 38

GoDaddy (United States)

The following table lists the pre-installed SSL root certificates from GoDaddy.

CA Root Name CA root Signature CA root Thumbprint

size hash expires

Go Daddy Class 2

2048 SHA1 06/29/2034 27 96 ba e6 3f 18 01 e2 77 26 1b a0

Certification Authority

d7 77 70 02 8f 20 ee e4

ValiCert Class 2 Policy

1024 SHA1 06/25/2019 31 7a 2a d0 7f 2b 33 5e f5 a1 c3 4e

Validation Authority

4b 57 e8 b7 d8 f1 fc a6

Starfield Class 2

2048 SHA1 06/29/2034 ad 7e 1c 28 b0 64 ef 8f 60 03 40 20

Certification Authority

14 c3 d0 e3 37 0e b5 8a

Keynectis (France)

The following table lists the pre-installed SSL root certificates from Keynectis.

CA root name CA root Signature CA root Thumbprint

size hash expires

KEYNECTIS

2048 SHA1 05/26/2020 9c 61 5c 4d 4d 85 10 3a 53 26 c2 4d ba ea

ROOT CA

e4 a2 d2 d5 cc 97

Class 2 Primary 2048 SHA1 07/07/2019 74 20 74 41 72 9c dd 92 ec 79 31 d8 23 10

OEG 5.1.1 12/2010

Windows® Phone 7 for IT professionals

CA

8d c2 81 92 e2 bb

QuoVadis (Bermuda)

The following table lists the pre-installed SSL root certificates from QuoVadis.

CA root name CA root Signature CA root Thumbprint

size hash expires

QuoVadis Root

2048 SHA1 03/17/2021 de 3f 40 bd 50 93 d3 9b 6c 60 f6 da

Certification Authority

bc 07 62 01 00 89 76 c9

QuoVadis Root CA 2 4096 SHA1 11/24/2031 ca 3a fb cf 12 40 36 4b 44 b2 16 20 88

80 48 39 19 93 7c f7

QuoVadis Root CA 3 4096 SHA1 11/24/2031 1f 49 14 f7 d8 74 95 1d dd ae 02 c0

be fd 3a 2d 82 75 51 85

4

RSA Security (United States)

The following table lists the pre-installed SSL root certificates from RSA Security.

CA root name CA root Signature CA root Thumbprint

size hash expires

ValiCert Class 3 Policy

1024 SHA1 06/25/2019 69 bd 8c f4 9c d3 00 fb 59 2e 17 93

Validation Authority

ca 55 6a f3 ec aa 35 fb

SECOM Trust Systems Co. Ltd (Japan)

The following table lists the pre-installed SSL root certificates from SECOM Trust Systems Co. Ltd.

CA root name CA root Signature CA root Thumbprint

size hash expires

Security Communication

2048 SHA1 06/06/2037 FEB8 C432 DCF9 769A CEAE 3DD8

EV RootCA1

908F FD28 8665 647D

Security Communication

2048 SHA1 09/30/2023 36B1 2B49 F981 9ED7 4C9E BC38

RootCA1

0FC6 568F 5DAC B2F7

Security Communication

2048 SHA256 05/29/2029 5F3B 8CF2 F810 B37D 78B4 CEEC

RootCA2

1919 C373 34B9 C774

Taiwan-CA Inc. (Taiwan)

The following table lists the pre-installed SSL root certificates from Taiwan-CA Inc. (TWCA).

CA root name CA root Signature CA root Thumbprint

size hash expires

TWCA Root

2048 SHA1 12/31/2030 cf 9e 87 6d d3 eb fc 42 26 97 a3 b5 a3

Certification Authority

7a a0 76 a9 06 23 48

OEG 5.1.1 12/2010

Windows® Phone 7 for IT professionals

TrustCenter (Germany)

The following table lists the pre-installed SSL root certificates from TrustCenter (a company of Chosen

Security).

CA root name CA root Signature CA root Thumbprint

size hash expires

TC TrustCenter Class

2048 SHA1 12/31/2025 ae 50 83 ed 7c f4 5c bc 8f 61 c6 21 fe 68

2 CA II

5d 79 42 21 15 6e

TC TrustCenter

2048 SHA1 12/31/2025 6b 2f 34 ad 89 58 be 62 fd b0 6b 5c ce

Universal CA I

bb 9d d9 4f 4e 39 f3

TC TrustCenter

2048 SHA1 12/31/2029 96 56 cd 7b 57 96 98 95 d0 e1 41 46 68

Universal CA III

06 fb b8 c6 11 06 87

5

Trustwave (United States)

The following table lists the pre-installed SSL root certificates from Trustwave.

CA root name CA root Signature CA root Thumbprint

size hash expires

Secure Global CA 2048 SHA1 12/31/2029 3a 44 73 5a e5 81 90 1f 24 86 61 46

1e 3b 9c c4 5f f5 3a 1b

SecureTrust CA 2048 SHA1 12/31/2029 87 82 c6 c3 04 35 3b cf d2 96 92 d2

59 3e 7d 44 d9 34 ff 11

XRamp Global

2048 SHA1 01/01/2035 b8 01 86 d1 eb 9c 86 a5 41 04 cf 30

Certification Authority

54 f3 4c 52 b7 e5 58 c6

Verisign (United States)

The following table lists the pre-installed SSL root certificates from Verisign.

CA root name CA root Signature CA root

size hash expires

VeriSign Class 3

2048 SHA1 07/16/2036

PublicPrimary Certification

Authority - G3

VeriSign Class 3 Public

2048 SHA1 07/16/2036

Primary Certification

Authority - G5

Class 3 Public Primary

1024 SHA1 08/01/2028

Certification Authority - G2

Class 3 Public Primary

1024 SHA1 08/02/2028

Certification Authority

VeriSign Class 3

ECDSA SHA384 01/18/2038

PublicPrimary Certification

Authority - G4

VeriSign Universal Root

2048 SHA256 12/01/2037

Certification Authority

Thumbprint

13 2d 0d 45 53 4b 69 97 cd b2

d5 c3 39 e2 55 76 60 9b 5c c6

4e b6 d5 78 49 9b 1c cf 5f58 1e

ad 56 be 3d 9b 67 44 a5 e5

85 37 1c a6 e5 50 14 3d ce 28 03

47 1b de 3a 09 e8 f8 77 0f

a1 db 63 93 91 6f 17 e4 18 55 09

40 04 15 c7 02 40 b0 ae 6b

22 d5 d8 df 8f 02 31 d1 8d f7 9d

b7 cf 8a 2d 64 c9 3f 6c 3a

36 79 ca 35 66 87 72 30 4d 30

a5 fb 87 3b 0f a7 7b b7 0d 54

OEG 5.1.1 12/2010

Windows® Phone 7 for IT professionals

GeoTrust Global CA

GeoTrust Primary

Certification Authority - G2

GeoTrust Primary

Certification Authority - G3

GeoTrust Primary

Certification Authority

Thawte Primary Root CA

Thawte Primary Root CA - G2

Thawte Primary Root CA – G3

Class 2 Public Primary

Certification Authority

Class 3 Public Primary

Certification Authority

Equifax Secure Certificate

Authority

GeoTrust Global CA

Thawte Premium Server CA

Thawte Server CA

2048

ECC384

2048

2048

2048

ECDSA

2048

1024

1024

1024

2048

1024

1024

SHA1

ECDSA

SHA256

SHA1

SHA1

SHA384

SHA256

MD2

MD2

SHA1

SHA1

MD5

MD5

05/20/2022

01/18/2038

12/01/2037

07/16/2036

07/16/2036

01/18/2038

12/01/2037

08/01/2028

08/01/2028

08/22/2018

05/20/2022

12/31/2020

12/31/2020

de 28 f4 a4 ff e5 b9 2f a3 c5 03

d1 a3 49 a7 f9 96 2a 82 12

8d 17 84 d5 37 f3 03 7d ec 70 fe

57 8b 51 9a 99 e6 10 d7 b0

03 9e ed b8 0b e7 a0 3c 69 53

89 3b 20 d2 d9 32 3a 4c 2a fd

32 3c 11 8e 1b f7 b8 b6 52 54 e2

e2 10 0d d6 02 90 37 f0 96

91 c6 d6 ee 3e 8a c8 63 84 e5 48

c2 99 29 5c 75 6c 81 7b 81

aa db bc 22 23 8f c4 01 a1 27 bb

38 dd f4 1d db 08 9e f0 12

f1 8b 53 8d 1b e9 03 b6 a6 f0 56

43 5b 17 15 89 ca f3 6b f2

67 82 aa e0 ed ee e2 1a 58 39

d3 c0 cd 14 68 0a 4f 60 14 2a

74 2c 31 92 e6 07 e4 24 eb 45

49 54 2b e1 bb c5 3e 61 74 e2

d2 32 09 ad 23 d3 14 23 21 74

e4 0d 7f 9d 62 13 97 86 63 3a

de 28 f4 a4 ff e5 b9 2f a3 c5 03

d1 a3 49 a7 f9 96 2a 82 12

62 7f 8d 78 27 65 63 99 d2 7d 7f

90 44 c9 fe b3 f3 3e fa 9a

23 e5 94 94 51 95 f2 41 48 03 b4

d5 64 d2 a3 a3 f5 d8 8b 8c

6

Verizon Business (United States)

The following table lists the pre-installed SSL root certificates from Verizon Business.

CA root name CA root Signature CA root Thumbprint

size hash expires

Baltimore

2048 SHA1 05/12/2025 d4 de 20 d0 5e 66 fc 53 fe 1a 50 88 2c 78

CyberTrust Root

db 28 52 ca e4 74

GTE CyberTrust

1024 MD5 08/13/2018 97 81 79 50 d8 1c 96 70 cc 34 d8 09 cf 79

Global Root

44 31 36 7e f4 74

Resources

Understanding Digital Certificates and SSL on Microsoft TechNet

“Windows Phone 7 and certificates” on the Windows Phone 7 Guides for IT Professionals page

OEG 5.1.1 12/2010

Windows® Phone 7 for IT professionals

Legal Disclaimer

The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of

publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of

Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. Schedules and features

contained in this document are subject to change.

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE

INFORMATION IN THIS DOCUMENT.

Features and services may vary by area, phone, carrier, plan and version of Windows Phone software. Fees may apply. See

/versions and your phone provider for more information.

Available programs, features, and functionality may vary by device. Connectivity and synchronization may require separately purchased

equipment and/or wireless products (e.g., Wi-Fi card, network software, server hardware, and/or redirector software). Service plans are required

for Internet, Wi-Fi and phone access. Features and performance may vary by service provider and are subject to network limitations. See device

manufacturer, service provider and/or corporate IT department for details. Access to and use of the Internet may require payment of a separate

fee to an Internet service provider. Local and/or long-distance telephone charges may apply.

Flash functionality requires Adobe Flash Lite player, which may not be available on all devices. Direct Push Technology requires Exchange Server

2003 Service Pack 2 or newer version. Office Mobile programs must be purchased separately for some devices. Office Mobile is not included in

Office 2010 applications, suites, or Web Apps. Office Mobile will be released on Windows Phone 7 devices in the second half of the 2010

calendar year. Office Web Apps must be installed to host a Microsoft PowerPoint® presentation broadcast via SharePoint 2010. Broadcasting

via Windows Live is a free service that enables up to 50 attendees per broadcast. Viewing a broadcast on the phone does not require add-ons

or additional components.

© 2010 Microsoft Corporation. All rights reserved. Microsoft, PowerPoint, SharePoint, Windows, and Windows Live are trademarks of the

Microsoft group of companies. All other trademarks are property of their respective owners.

Published: December 2010

7

OEG 5.1.1 12/2010