- Issuer
- Microsoft TLS G2 RSA CA OCSP 04
- Max TLS
- TLS1.3
- TLS versions
- TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
- Cipher
- ECDHE-RSA-AES256-GCM-SHA384
- Expires
- 1/19/2027 ( 75 d)
- HSTS
- Disabled
- OCSP Stapling
- Disabled
- Last scanned
- 11/4/2026, 11:45:58 AM
Report summary
cloud.microsoft currently holds an SSL grade of A (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, does not enable HSTS, and its certificate is issued by Microsoft TLS G2 RSA CA OCSP 04 — 75 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.
Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.
cloud.microsoft scores higher than 68% of the 12,269 sites we grade.
Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.
Full certificate & config details
- Common Name
- cloud.microsoft
- Key
- rsaencryption 2048bit
- Sig Hash
- SHA-384
- Chain
- Complete
- SAN
- www.cloud.microsoft · pulse.viva.cloud.microsoft · cloud.microsoft
- Fingerprint
- 78cf642aec2693f80aa76d052677e113a485c0c0a0d68d8201b682ca0681b919
What’s working
- TLS 1.3 enabled
- Complete certificate chain
- No legacy TLS or weak ciphers
Score trend
Recent history
| Time | Grade | Score | Issuer |
|---|---|---|---|
| 11/4/2026, 11:45:58 AM | A | 100 | Microsoft TLS G2 RSA CA OCSP 04 |
| 9/9/2026, 7:55:38 PM | A | 95 | Microsoft TLS G2 RSA CA OCSP 10 |
| 9/8/2026, 1:37:58 PM | A | 94 | Microsoft Corporation |
Score change insights · Last 90 days
Net change ↑ +5-
↑
11/4/2026 +5CA changedTLS version support improvedAlso observedCAA: — → issue "microsoft.com", iodef "mailto:caarecordaware@microsoft.com", ? "", issue "digicert.com"
FAQ
When does cloud.microsoft’s certificate expire?
cloud.microsoft’s certificate expires on 1/19/2027, in 75 days, issued by Microsoft TLS G2 RSA CA OCSP 04.
Is cloud.microsoft’s TLS configuration secure?
cloud.microsoft currently scores A (100/100). It negotiates TLS1.3, TLS1.2 and does not enable HSTS.
Why did cloud.microsoft’s score change?
11/4/2026: +5 points — CA changed · TLS version support improved