JWKS Catalog

Cloudflare Access (SSO)

OpenID Configuration https://sso.cloudflareaccess.com/.well-known/openid-configuration
OAuth 2.0 Authorization Server Metadata https://sso.cloudflareaccess.com/.well-known/oauth-authorization-server
JWKS URI https://sso.cloudflareaccess.com/cdn-cgi/access/certs

Active Keys

KID Use Alg/Crv Key Length Observed
8a99f9765a1f061ee2d1f49578018a63cf8b6ccf526c69864b1ab715a15f7b9b sig RS256 2048 2026-08-18
09585179a0d31caed7942f1fd7dd74ff93b16e669801d7ec6ea9913f57645f85 sig RS256 2048 2026-07-07

Recently Deactivated Keys

(Most recent 10 records shown)

KID Use Alg/Crv Key Length Observed
b3fb14f9d65fbe94c709abee64f864fb717ea4c0a8dec448d0739df4ed46e3f6 sig RS256 2048 2026-05-26 to 2026-08-18 (83 days)
be2ff6855c6dfe1e202ff555a864505c0529e74fe1e259ed51127c70b9438eba sig RS256 2048 2026-04-14 to 2026-07-07 (84 days)
aef56997dfe458595811a91b9517185611927f2b3f186a9bee42cceaa6680d37 sig RS256 2048 2026-03-03 to 2026-05-26 (84 days)
fc15ab2eaad7f49008f6fdb1c3b0d54e2f1911836078ec4a41829d71ef8b8b47 sig RS256 2048 2026-01-20 to 2026-04-14 (84 days)
c56f76d3bc3b33e7a2ca824855df315d2187ca7bbe66c2334299b615665b57ca sig RS256 2048 2025-12-09 to 2026-03-03 (84 days)
5e9386b6f1a52e1275af21e7395fdd7dc1b817900d1419f5b16756adf3716cf8 sig RS256 2048 2025-10-28 to 2026-01-20 (84 days)
0b191ab6231d6d8409303743cb1ff72f60cdb69c1d4cf495e8a9d1eb55aeba32 sig RS256 2048 2025-09-15 to 2025-12-09 (85 days)
7c6b3eb42df5741616eac763fe60a2b270a1cee21e67de6283e2c094020196ba sig RS256 2048 2025-08-04 to 2025-10-28 (84 days)
c0cb4ab00dd7ad683fc63208c4747c33edebc165cb9199a896b4e7093ab443ef sig RS256 2048 2025-07-17 to 2025-09-15 (60 days)
a79a92a96063f8bc513a6d483c7373ea55529a32d34b3920910262d003011658 sig RS256 2048 2025-07-17 to 2025-08-04 (18 days)