JWKS Catalog

Cloudflare Access (Accounts)

OpenID Configuration https://accounts.cloudflareaccess.com/.well-known/openid-configuration

OAuth 2.0 Authorization Server Metadata https://accounts.cloudflareaccess.com/.well-known/oauth-authorization-server

JWKS URI https://accounts.cloudflareaccess.com/cdn-cgi/access/certs

Active Keys

KID	Use	Alg/Crv	Key Length	Observed
961d3fc4338d7525378c1ce6df70d27ade25f1bb781f99063c633dbd1532b53f	sig	RS256	2048	2026-09-29
eb12ca2574e1e96f73253014b2eb9860b26ce4455fa3b0ec3a621119a1cdf05a	sig	RS256	2048	2026-08-18

Identity Provider Signals

No listed provider signal was found in the available response headers. These providers may still be in use.

Recently Deactivated Keys

(Most recent 10 records shown)

KID	Use	Alg/Crv	Key Length	Observed
23be8dbfcf751215b12aee2e38b02453b2257f49899ec5e450936e51e2b95016	sig	RS256	2048	2026-07-07 to 2026-09-29 (84 days)
d3fa7a1eb9e3b14c7de0f6b7bbfd3b48d52b2bc76f0d158baefa5e2f2585ce0b	sig	RS256	2048	2026-05-26 to 2026-08-18 (83 days)
e7544662eba305350ee8c4e53fab0affffaa0ab4ac840d269f415f2305920455	sig	RS256	2048	2026-04-13 to 2026-07-07 (85 days)
bb4a053e0224a52ed52714b131146c8e65e080c031c7f65be3395b0d71102929	sig	RS256	2048	2026-03-02 to 2026-05-26 (85 days)
3d1fcc7a52be99aff0dca0f4408e578954a0b1399122018bc2bff28137fec3e4	sig	RS256	2048	2026-01-19 to 2026-04-13 (84 days)
628f97e6acc790a48bc502cc11da6dd109217e76597b3d348b67a812893b8ea8	sig	RS256	2048	2025-12-08 to 2026-03-02 (84 days)
8cf77f568b289035654e83a27e15f245b1c961fab3123b6359bfca1d6066b2a0	sig	RS256	2048	2025-10-27 to 2026-01-19 (84 days)
f903efa1e62c9cf0babc3b4be70ac2335c5c2fad33f2dd9ca0df8a8850dad2ac	sig	RS256	2048	2025-09-15 to 2025-12-08 (84 days)
d512a03c24995a21c6767f883d802f1e8677a590ad7bba78e33af2f3f209b5f2	sig	RS256	2048	2025-08-04 to 2025-10-27 (83 days)
2e46f80319bcd6da5e234efad896bb1df0dc9291aae17f59fc02ffb259a6265e	sig	RS256	2048	2025-07-17 to 2025-09-15 (60 days)