JWKS Catalog

Cloudflare Access (Account)

OpenID Configuration https://account.cloudflareaccess.com/.well-known/openid-configuration

OAuth 2.0 Authorization Server Metadata https://account.cloudflareaccess.com/.well-known/oauth-authorization-server

JWKS URI https://account.cloudflareaccess.com/cdn-cgi/access/certs

Active Keys

KID	Use	Alg/Crv	Key Length	Observed
50e20db666dfaecc8d828a2a29183c33fdb0639e9a53045c9d9e18f777f23e5a	sig	RS256	2048	2026-10-14
5c48a7ad11f994ac7bb6f3d8d30b8641ede710c67d523be8bae6a358094f0e7d	sig	RS256	2048	2026-09-02

Identity Provider Signals

No listed provider signal was found in the available response headers. These providers may still be in use.

Recently Deactivated Keys

(Most recent 10 records shown)

KID	Use	Alg/Crv	Key Length	Observed
1d61cc3f425804b64a41fd791b00773af042bc4b670ba11cf1176ccd4b5a2339	sig	RS256	2048	2026-07-22 to 2026-10-14 (84 days)
864061ed6437772ee7e56eff4a21383ec4c244f0dff27d5f981de868aceabbf1	sig	RS256	2048	2026-06-09 to 2026-09-02 (85 days)
d2ace1ff4ed75905045b507f41551135e6534d8fc86f343a930c562a754c3767	sig	RS256	2048	2026-04-28 to 2026-07-22 (85 days)
5c1ecc58bb2931437f78442265182baea61696693ade086ac6db199cca2fd101	sig	RS256	2048	2026-03-17 to 2026-06-09 (84 days)
02895a976821922b36faa64fbd44b7d0debe357b197d473bd27e05df775a7698	sig	RS256	2048	2026-02-03 to 2026-04-28 (84 days)
025f97293ee8e18e5658b30cf54e1c939db30f0324082a30bf6832c03bb7816d	sig	RS256	2048	2025-12-23 to 2026-03-17 (84 days)
b7eca0dc5e741a199f75f54b1bf1909c630ea771c78642d26841da0211062e91	sig	RS256	2048	2025-11-11 to 2026-02-03 (84 days)
fbd8c2eaa84f5a4aef86073cd07379807daf8a47ef401f5ed8efa8943408b21f	sig	RS256	2048	2025-09-29 to 2025-12-23 (85 days)
f6b72853662a4e4d1c58129b65d1a1d49be70cbfdf44284208d761e527b4f920	sig	RS256	2048	2025-08-18 to 2025-11-11 (85 days)
39e8de0be02f346a2d6fada755afe91be84447da8a4a38ebcd6ac4fc018058f8	sig	RS256	2048	2025-07-17 to 2025-09-29 (74 days)