Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.
Obě strany předchozí revize Předchozí verze | Následující verze Obě strany příští revize | ||
en:ch-tcs-crt-crl.html [2014/10/30 12:57] chvojka@cesnet.cz |
en:ch-tcs-crt-crl.html [2015/06/02 18:14] bozon@cesnet.cz DigiCert |
||
---|---|---|---|
Řádek 3: | Řádek 3: | ||
You can get your server certificate on [[https://tcs.cesnet.cz/|https://tcs.cesnet.cz/]]. | You can get your server certificate on [[https://tcs.cesnet.cz/|https://tcs.cesnet.cz/]]. | ||
- | ===== We moved to SHA2 ===== | + | ===== New CA Root - DigiCert ===== |
- | TCS server certificates, COMODO, started to issue SHA2 certificates. Root certificate and certificate chain remained the same. Only intermediate certificates has changed. If you know what SHA1 means and you are sure you want it, please read next chapter. | + | On July 1<sup>st</sup> 2015 there will be a new supplier of TCS certificates - DigiCert company. After this date, the certificates will be issued under this root only. |
+ | |||
+ | * [[en:ch-tcs-ssl-ca-3-crt-crl.html|New server certificates - chain a CRL]] | ||
+ | * [[en:ch-tcs-esci-ssl-ca-3-crt-crl.html|New grid server certificates - chain a CRL]] | ||
+ | |||
+ | ===== Comodo ===== | ||
+ | |||
+ | From the reasons specified above, it will be no longer possible to issue new TCS certificates under the old Comodo root after 2015-07-01. Existing certificates remain valid (until the expiration or revocation). | ||
* [[en:ch-tcs-ssl-ca-2-crt-crl.html|Normal server certificates - chain and CRL]] | * [[en:ch-tcs-ssl-ca-2-crt-crl.html|Normal server certificates - chain and CRL]] | ||
* [[en:ch-tcs-esci-ssl-ca-2-crt-crl.html|Grid server certificates - chain and CRL]] | * [[en:ch-tcs-esci-ssl-ca-2-crt-crl.html|Grid server certificates - chain and CRL]] | ||
- | ===== I want certificate with SHA1 ===== | + | ==== Certificates with SHA1 ==== |
TCS certificate portal can't issue the SHA1 certificates nowadays. If you are sure you want a SHA1 certificate, please contact us at <tcs-ra@cesnet.cz>. Certification chains for SHA1 certificates remained the same. Certification chains and CRLs are below. | TCS certificate portal can't issue the SHA1 certificates nowadays. If you are sure you want a SHA1 certificate, please contact us at <tcs-ra@cesnet.cz>. Certification chains for SHA1 certificates remained the same. Certification chains and CRLs are below. |