Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.
Obě strany předchozí revize Předchozí verze Následující verze | Předchozí verze Následující verze Obě strany příští revize | ||
en:ch-tcs-crt-crl.html [2015/06/02 18:14] bozon@cesnet.cz DigiCert |
en:ch-tcs-crt-crl.html [2023/11/02 13:33] Jan Chvojka |
||
---|---|---|---|
Řádek 1: | Řádek 1: | ||
- | ====== TCS Server certificates ====== | + | ====== TCS Server Certificates ====== |
- | You can get your server certificate on [[https://tcs.cesnet.cz/|https://tcs.cesnet.cz/]]. | + | \\ |
- | ===== New CA Root - DigiCert ===== | ||
- | On July 1<sup>st</sup> 2015 there will be a new supplier of TCS certificates - DigiCert company. After this date, the certificates will be issued under this root only. | + | ===== AAA Certificate Services (root certificate) ===== |
- | * [[en:ch-tcs-ssl-ca-3-crt-crl.html|New server certificates - chain a CRL]] | + | ^ Jméno CA | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=**AAA Certificate Services** | |
- | * [[en:ch-tcs-esci-ssl-ca-3-crt-crl.html|New grid server certificates - chain a CRL]] | + | ^ Vydavatel | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services | |
+ | ^ Platnost od | January 1<sup>st</sup>, 2004 | | ||
+ | ^ Platnost do | December 31<sup>st</sup>, 2028 | | ||
+ | ^ Sériové číslo | 1 | | ||
+ | ^ Otisk SHA1 | d1:eb:23:a4:6d:17:d6:8f:d9:25:64:c2:f1:f1:60:17:64:d8:e3:49 | | ||
+ | ^ Otisk SHA256 | d7:a7:a0:fb:5d:7e:27:31:d7:71:e9:48:4e:bc:de:f7:1d:5f:0c:3e:0a:29:48:78:2b:c8:3e:e0:ea:69:9e:f4 | | ||
+ | ^ Certifikát CA | {{ :certs:aaa_certificate_services.crt | Install (DER) }} — {{ :certs:aaa_certificate_services.pem | Download (PEM) }} — {{ :certs:aaa_certificate_services.txt | Preview (TXT) }} | | ||
+ | ^ Aktuální CRL | [[http://crl.comodoca.com/AAACertificateServices.crl|Download (crl.comodoca.com)]] | | ||
+ | \\ | ||
- | ===== Comodo ===== | + | ===== USERTrust RSA Certification Authority (intermediate certificate) ===== |
- | From the reasons specified above, it will be no longer possible to issue new TCS certificates under the old Comodo root after 2015-07-01. Existing certificates remain valid (until the expiration or revocation). | + | ^ Jméno CA | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=**USERTrust RSA Certification Authority** | |
+ | ^ Vydavatel | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services | | ||
+ | ^ Platnost od | March 12<sup>th</sup>, 2019 | | ||
+ | ^ Platnost do | December 31<sup>st</sup>, 2028 | | ||
+ | ^ Sériové číslo | 39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95 | | ||
+ | ^ Otisk SHA1 | d8:9e:3b:d4:3d:5d:90:9b:47:a1:89:77:aa:9d:5c:e3:6c:ee:18:4c | | ||
+ | ^ Otisk SHA256 | 68:b9:c7:61:21:9a:5b:1f:01:31:78:44:74:66:5d:b6:1b:bd:b1:09:e0:0f:05:ca:9f:74:24:4e:e5:f5:f5:2b | | ||
+ | ^ Certifikát CA | {{ :certs:usertrust_rsa_certification_authority.crt | Install (DER) }} — {{ :certs:usertrust_rsa_certification_authority.pem | Download (PEM) }} — {{ :certs:usertrust_rsa_certification_authority.txt | Preview (TXT) }} | | ||
+ | ^ Aktuální CRL | [[http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl|Download (crl.usertrust.com)]] | | ||
- | * [[en:ch-tcs-ssl-ca-2-crt-crl.html|Normal server certificates - chain and CRL]] | + | \\ |
- | * [[en:ch-tcs-esci-ssl-ca-2-crt-crl.html|Grid server certificates - chain and CRL]] | + | |
- | ==== Certificates with SHA1 ==== | + | ===== GEANT OV RSA CA 4 (intermediate certificate) ===== |
- | TCS certificate portal can't issue the SHA1 certificates nowadays. If you are sure you want a SHA1 certificate, please contact us at <tcs-ra@cesnet.cz>. Certification chains for SHA1 certificates remained the same. Certification chains and CRLs are below. | + | ^ CA name | C=NL, O=GEANT Vereniging, CN=**GEANT OV RSA CA 4** | |
- | + | ^ Issuer | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority | | |
- | * [[en:ch-tcs-ssl-ca-crt-crl.html|Normal server certificates with SHA1 - chain and CRL]] | + | ^ Valid from | February 18<sup>th</sup>, 2020 | |
- | * [[en:ch-tcs-esci-ssl-ca-crt-crl.html|Grid server certificates with SHA1 - chain and CRL]] | + | ^ Valid to | May 1<sup>st</sup>, 2033 | |
+ | ^ Serial number | da:43:bd:13:9b:d2:58:bb:4d:d6:1c:ac:c4:f3:db:e0 | | ||
+ | ^ SHA1 hash | c2:82:6e:26:6d:74:05:d3:4e:f8:97:62:63:6a:e4:b3:6e:86:cb:5e | | ||
+ | ^ SHA256 hash | 37:83:4f:a5:ea:40:fb:f7:b6:11:96:95:59:62:e1:ca:05:58:87:24:35:e4:20:66:53:d3:f6:20:dd:8e:98:8e | | ||
+ | ^ CA certificate | {{ :certs:geant_ov_rsa_ca_4.crt | Install (DER)}} --- {{ :certs:geant_ov_rsa_ca_4.pem | Download (PEM)}} --- {{ :certs:geant_ov_rsa_ca_4.txt | Preview (TXT)}} | | ||
+ | ^ Current CRL | [[http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl|Download (GEANT.crl.sectigo.com)]] | | ||
+ | ^ Certificate chain (intermediate only) | {{ :certs:chain_geant_ov_rsa_ca_4.pem | Download (PEM)}} | | ||
+ | ^ Certificate chain (full chain) | {{ :certs:chain_geant_ov_rsa_ca_4_full.pem | Download (PEM)}} | |