Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.
Obě strany předchozí revize Předchozí verze Následující verze | Předchozí verze Následující verze Obě strany příští revize | ||
en:ch-tcs-crt-crl.html [2014/10/30 12:57] chvojka@cesnet.cz |
en:ch-tcs-crt-crl.html [2023/11/02 13:33] Jan Chvojka |
||
---|---|---|---|
Řádek 1: | Řádek 1: | ||
- | ====== TCS Server certificates ====== | + | ====== TCS Server Certificates ====== |
- | You can get your server certificate on [[https://tcs.cesnet.cz/|https://tcs.cesnet.cz/]]. | + | \\ |
- | ===== We moved to SHA2 ===== | ||
- | TCS server certificates, COMODO, started to issue SHA2 certificates. Root certificate and certificate chain remained the same. Only intermediate certificates has changed. If you know what SHA1 means and you are sure you want it, please read next chapter. | + | ===== AAA Certificate Services (root certificate) ===== |
- | * [[en:ch-tcs-ssl-ca-2-crt-crl.html|Normal server certificates - chain and CRL]] | + | ^ Jméno CA | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=**AAA Certificate Services** | |
- | * [[en:ch-tcs-esci-ssl-ca-2-crt-crl.html|Grid server certificates - chain and CRL]] | + | ^ Vydavatel | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services | |
+ | ^ Platnost od | January 1<sup>st</sup>, 2004 | | ||
+ | ^ Platnost do | December 31<sup>st</sup>, 2028 | | ||
+ | ^ Sériové číslo | 1 | | ||
+ | ^ Otisk SHA1 | d1:eb:23:a4:6d:17:d6:8f:d9:25:64:c2:f1:f1:60:17:64:d8:e3:49 | | ||
+ | ^ Otisk SHA256 | d7:a7:a0:fb:5d:7e:27:31:d7:71:e9:48:4e:bc:de:f7:1d:5f:0c:3e:0a:29:48:78:2b:c8:3e:e0:ea:69:9e:f4 | | ||
+ | ^ Certifikát CA | {{ :certs:aaa_certificate_services.crt | Install (DER) }} — {{ :certs:aaa_certificate_services.pem | Download (PEM) }} — {{ :certs:aaa_certificate_services.txt | Preview (TXT) }} | | ||
+ | ^ Aktuální CRL | [[http://crl.comodoca.com/AAACertificateServices.crl|Download (crl.comodoca.com)]] | | ||
+ | \\ | ||
- | ===== I want certificate with SHA1 ===== | + | ===== USERTrust RSA Certification Authority (intermediate certificate) ===== |
- | TCS certificate portal can't issue the SHA1 certificates nowadays. If you are sure you want a SHA1 certificate, please contact us at <tcs-ra@cesnet.cz>. Certification chains for SHA1 certificates remained the same. Certification chains and CRLs are below. | + | ^ Jméno CA | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=**USERTrust RSA Certification Authority** | |
+ | ^ Vydavatel | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services | | ||
+ | ^ Platnost od | March 12<sup>th</sup>, 2019 | | ||
+ | ^ Platnost do | December 31<sup>st</sup>, 2028 | | ||
+ | ^ Sériové číslo | 39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95 | | ||
+ | ^ Otisk SHA1 | d8:9e:3b:d4:3d:5d:90:9b:47:a1:89:77:aa:9d:5c:e3:6c:ee:18:4c | | ||
+ | ^ Otisk SHA256 | 68:b9:c7:61:21:9a:5b:1f:01:31:78:44:74:66:5d:b6:1b:bd:b1:09:e0:0f:05:ca:9f:74:24:4e:e5:f5:f5:2b | | ||
+ | ^ Certifikát CA | {{ :certs:usertrust_rsa_certification_authority.crt | Install (DER) }} — {{ :certs:usertrust_rsa_certification_authority.pem | Download (PEM) }} — {{ :certs:usertrust_rsa_certification_authority.txt | Preview (TXT) }} | | ||
+ | ^ Aktuální CRL | [[http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl|Download (crl.usertrust.com)]] | | ||
- | * [[en:ch-tcs-ssl-ca-crt-crl.html|Normal server certificates with SHA1 - chain and CRL]] | + | \\ |
- | * [[en:ch-tcs-esci-ssl-ca-crt-crl.html|Grid server certificates with SHA1 - chain and CRL]] | + | |
+ | ===== GEANT OV RSA CA 4 (intermediate certificate) ===== | ||
+ | |||
+ | ^ CA name | C=NL, O=GEANT Vereniging, CN=**GEANT OV RSA CA 4** | | ||
+ | ^ Issuer | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority | | ||
+ | ^ Valid from | February 18<sup>th</sup>, 2020 | | ||
+ | ^ Valid to | May 1<sup>st</sup>, 2033 | | ||
+ | ^ Serial number | da:43:bd:13:9b:d2:58:bb:4d:d6:1c:ac:c4:f3:db:e0 | | ||
+ | ^ SHA1 hash | c2:82:6e:26:6d:74:05:d3:4e:f8:97:62:63:6a:e4:b3:6e:86:cb:5e | | ||
+ | ^ SHA256 hash | 37:83:4f:a5:ea:40:fb:f7:b6:11:96:95:59:62:e1:ca:05:58:87:24:35:e4:20:66:53:d3:f6:20:dd:8e:98:8e | | ||
+ | ^ CA certificate | {{ :certs:geant_ov_rsa_ca_4.crt | Install (DER)}} --- {{ :certs:geant_ov_rsa_ca_4.pem | Download (PEM)}} --- {{ :certs:geant_ov_rsa_ca_4.txt | Preview (TXT)}} | | ||
+ | ^ Current CRL | [[http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl|Download (GEANT.crl.sectigo.com)]] | | ||
+ | |||
+ | ^ Certificate chain (intermediate only) | {{ :certs:chain_geant_ov_rsa_ca_4.pem | Download (PEM)}} | | ||
+ | ^ Certificate chain (full chain) | {{ :certs:chain_geant_ov_rsa_ca_4_full.pem | Download (PEM)}} | |