JWKS Catalog

Cloudflare Access (STS)

OpenID Configuration https://sts.cloudflareaccess.com/.well-known/openid-configuration
OAuth 2.0 Authorization Server Metadata https://sts.cloudflareaccess.com/.well-known/oauth-authorization-server
JWKS URI https://sts.cloudflareaccess.com/cdn-cgi/access/certs

Active Keys

KID Use Alg/Crv Key Length Observed
b1ed3494ed3b5282d024849c8c3cc809e54194c227ef46ad96fc0caf5d080b03 sig RS256 2048 2026-08-17
9a620e5602d5896bf88ae7e4bb16b618fac956342a1171f29bdbbce51f367057 sig RS256 2048 2026-07-05

Recently Deactivated Keys

(Most recent 10 records shown)

KID Use Alg/Crv Key Length Observed
6461235d54c9592ed655b4fd6cd0b4c8488421e4cc530f78202e38278a5a941b sig RS256 2048 2026-05-25 to 2026-08-17 (83 days)
fda4eaa87fb23e036dcded1a4bfa1a2359aa72483b541216fee875ebdf83708c sig RS256 2048 2026-04-12 to 2026-07-05 (84 days)
8fbdf1376d05b1d90149d2e7ab53b72c07bc20cdc0f607a6595ad481be2db760 sig RS256 2048 2026-03-01 to 2026-05-25 (85 days)
5b3955eeded659199d8786857f079ee89dfbeac0f4f87d3d599e551783eb3c22 sig RS256 2048 2026-01-18 to 2026-04-12 (84 days)
595d59815197caed37f9070607c3f85cc0f714307bbce12876a536f2dc107813 sig RS256 2048 2025-12-07 to 2026-03-01 (84 days)
3da01bd517900674514412d3ffabe1e4638b6b3090be2feba83c6dfff8eece08 sig RS256 2048 2025-10-26 to 2026-01-18 (84 days)
28dcbcb25a6bcfe18693de022113b5ad087db851a98e1d8fe44821eddc315172 sig RS256 2048 2025-09-14 to 2025-12-07 (84 days)
952f76d4f3b3af381610884798cd48a8726da813479dd921eaeaa6110e00ec21 sig RS256 2048 2025-08-03 to 2025-10-26 (83 days)
1a59984539dfea66a2db131fad961731f2b6508e5a167f8a50aedde5a43dcecf sig RS256 2048 2025-07-17 to 2025-09-14 (59 days)
aba2b7469f65e8fe54a33beefbae13a62af07a2cf23d521d9bcd5809b1b0d0eb sig RS256 2048 2025-07-17 to 2025-08-03 (17 days)