JWKS Catalog

Cloudflare Access (OpenID)

OpenID Configuration https://openid.cloudflareaccess.com/.well-known/openid-configuration
OAuth 2.0 Authorization Server Metadata https://openid.cloudflareaccess.com/.well-known/oauth-authorization-server
JWKS URI https://openid.cloudflareaccess.com/cdn-cgi/access/certs

Active Keys

KID Use Alg/Crv Key Length Observed
bfd39f5091be6d98a221f69215caa5172726e6f5fac045381b6b572c6e68b7bd sig RS256 2048 2026-08-25
b4b475997d09856dd5e821e1f3aeafac7d10ff72e2de0e0703bb2e57972af705 sig RS256 2048 2026-07-14

Recently Deactivated Keys

(Most recent 10 records shown)

KID Use Alg/Crv Key Length Observed
fbc696331ca22e30c7909073a572e338535e05658fa6d3b9b94eb26f59926ce8 sig RS256 2048 2026-06-02 to 2026-08-25 (83 days)
23401b53baec7a140740edf85a17b8059151bd9f5a221972984be64519c98557 sig RS256 2048 2026-04-21 to 2026-07-14 (84 days)
3a829d18fbd6764e23f57f9416ed15a2b4527ed433ca1c2896fcac02306447cc sig RS256 2048 2026-03-10 to 2026-06-02 (84 days)
f5b37aa4f32420b794b14b0ad85af51d01129ce9a0aca2ebcd6e9de6661c9740 sig RS256 2048 2026-01-27 to 2026-04-21 (84 days)
b56f67c2b539f17d47e59241f9aebf0008b509d044ee76bbca7baf4433296f85 sig RS256 2048 2025-12-16 to 2026-03-10 (84 days)
e8b53c638a27cd5c78347b28132a45d5d6ca48c6a2574079e12f7dc667881761 sig RS256 2048 2025-11-04 to 2026-01-27 (84 days)
e7c3873a5fe5df55eb1186455e179b336d87195a3d180a1e0688af3f16d4bc83 sig RS256 2048 2025-09-22 to 2025-12-16 (85 days)
5f379fd6dd8edc7126a9202741a548d0889c744f89e97086d40529f4fa0a85e9 sig RS256 2048 2025-08-11 to 2025-11-04 (84 days)
6587d803d28aeb2d9b6f908da8925a85c275f6748d9f4949ab2abd0940e7a480 sig RS256 2048 2025-07-17 to 2025-09-22 (67 days)
4ec2502ace58748cfdeb516fdeb8e8d2480b63892d792fc506934ed22b49d382 sig RS256 2048 2025-07-17 to 2025-08-11 (25 days)