en:ch-tcs-crt-crl.html

Rozdíly

Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.

Odkaz na výstup diff

Obě strany předchozí revize Předchozí verze
Následující verze
Předchozí verze
Následující verze Obě strany příští revize
en:ch-tcs-crt-crl.html [2015/06/02 18:14]
bozon@cesnet.cz DigiCert
en:ch-tcs-crt-crl.html [2023/11/02 13:33]
Jan Chvojka
Řádek 1: Řádek 1:
-====== TCS Server ​certificates ​======+====== TCS Server ​Certificates ​======
  
-You can get your server certificate on [[https://​tcs.cesnet.cz/​|https://​tcs.cesnet.cz/​]].+\\
  
-===== New CA Root - DigiCert ===== 
  
-On July 1<​sup>​st</​sup>​ 2015 there will be a new supplier of TCS certificates - DigiCert company. After this date, the certificates will be issued under this root only.+===== AAA Certificate Services (root certificate) =====
  
-    ​[[en:ch-tcs-ssl-ca-3-crt-crl.html|New server certificates - chain a CRL]] +^ Jméno CA      | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=**AAA Certificate Services** | 
-    ​* ​[[en:ch-tcs-esci-ssl-ca-3-crt-crl.html|New grid server certificates - chain a CRL]]+^ Vydavatel ​    | C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services | 
 +^ Platnost od   | January 1<​sup>​st</​sup>,​ 2004 | 
 +^ Platnost do   | December 31<​sup>​st</​sup>,​ 2028 | 
 +^ Sériové číslo | 1 | 
 +^ Otisk SHA1    | d1:eb:​23:​a4:​6d:​17:​d6:​8f:​d9:​25:​64:​c2:​f1:​f1:​60:​17:​64:​d8:​e3:​49 | 
 +^ Otisk SHA256 ​ | d7:​a7:​a0:​fb:​5d:​7e:​27:​31:​d7:​71:​e9:​48:​4e:​bc:​de:​f7:​1d:​5f:​0c:​3e:​0a:​29:​48:​78:​2b:​c8:​3e:​e0:​ea:​69:​9e:​f4 | 
 +^ Certifikát CA | {{ :​certs:​aaa_certificate_services.crt | Install (DER) }} — {{ :​certs:​aaa_certificate_services.pem | Download (PEM) }} — {{ :​certs:​aaa_certificate_services.txt | Preview (TXT) }} 
 +^ Aktuální CRL  | [[http://crl.comodoca.com/​AAACertificateServices.crl|Download (crl.comodoca.com)]] 
 +\\
  
-===== Comodo ​=====+===== USERTrust RSA Certification Authority (intermediate certificate) ​=====
  
-From the reasons specified aboveit will be no longer possible to issue new TCS certificates under the old Comodo ​root after 2015-07-01. Existing certificates remain valid (until the expiration or revocation).+^ Jméno CA      | C=USST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=**USERTrust RSA Certification Authority** | 
 +^ Vydavatel ​    | C=GB, ST=Greater Manchester, L=Salford, O=Comodo ​CA Limited, CN=AAA Certificate Services | 
 +^ Platnost od   | March 12<​sup>​th</​sup>,​ 2019 | 
 +^ Platnost do   | December 31<​sup>​st</​sup>,​ 2028 | 
 +^ Sériové číslo | 39:​72:​44:​3a:​f9:​22:​b7:​51:​d7:​d3:​6c:​10:​dd:​31:​35:​95 | 
 +^ Otisk SHA1    | d8:​9e:​3b:​d4:​3d:​5d:​90:​9b:​47:​a1:​89:​77:​aa:​9d:​5c:​e3:​6c:​ee:​18:​4c | 
 +^ Otisk SHA256 ​ | 68:​b9:​c7:​61:​21:​9a:​5b:​1f:​01:​31:​78:​44:​74:​66:​5d:​b6:​1b:​bd:​b1:​09:​e0:​0f:​05:​ca:​9f:​74:​24:​4e:​e5:​f5:​f5:​2b | 
 +^ Certifikát CA | {{ :​certs:​usertrust_rsa_certification_authority.crt | Install ​(DER}} — {{ :​certs:​usertrust_rsa_certification_authority.pem | Download (PEM) }} — {{ :​certs:​usertrust_rsa_certification_authority.txt | Preview (TXT) }} | 
 +^ Aktuální CRL  | [[http://​crl.usertrust.com/​USERTrustRSACertificationAuthority.crl|Download (crl.usertrust.com)]] ​ |
  
-    * [[en:​ch-tcs-ssl-ca-2-crt-crl.html|Normal server certificates - chain and CRL]] +\\
-    * [[en:​ch-tcs-esci-ssl-ca-2-crt-crl.html|Grid server certificates - chain and CRL]]+
  
-==== Certificates with SHA1 ====+===== GEANT OV RSA CA 4 (intermediate certificate) =====
  
-TCS certificate portal can't issue the SHA1 certificates nowadays. If you are sure you want a SHA1 certificateplease contact us at <tcs-ra@cesnet.cz>. Certification chains for SHA1 certificates remained the same. Certification chains and CRLs are below. +^ CA name        | C=NLO=GEANT Vereniging, CN=**GEANT OV RSA CA 4** | 
- +^ Issuer ​        | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority | 
-    ​* [[en:ch-tcs-ssl-ca-crt-crl.html|Normal server certificates with SHA1 - chain and CRL]] +^ Valid from     | February 18<sup>th</​sup>,​ 2020 | 
-    ​* ​[[en:ch-tcs-esci-ssl-ca-crt-crl.html|Grid server certificates with SHA1 - chain and CRL]]+^ Valid to       | May 1<​sup>​st</​sup>,​ 2033 | 
 +^ Serial number ​ | da:​43:​bd:​13:​9b:​d2:​58:​bb:​4d:​d6:​1c:​ac:​c4:​f3:​db:​e0 ​ | 
 +^ SHA1 hash      | c2:​82:​6e:​26:​6d:​74:​05:​d3:​4e:​f8:​97:​62:​63:​6a:​e4:​b3:​6e:​86:​cb:​5e | 
 +^ SHA256 hash    | 37:83:​4f:​a5:​ea:​40:​fb:​f7:​b6:​11:​96:​95:​59:​62:​e1:​ca:​05:​58:​87:​24:​35:​e4:​20:​66:​53:​d3:​f6:​20:​dd:​8e:​98:​8e | 
 +^ CA certificate | {{ :​certs:​geant_ov_rsa_ca_4.crt | Install (DER)}} ​---  {{ :​certs:​geant_ov_rsa_ca_4.pem | Download (PEM)}} ​--- {{ :​certs:​geant_ov_rsa_ca_4.txt | Preview (TXT)}} ​
 +^ Current CRL  | [[http://GEANT.crl.sectigo.com/​GEANTOVRSACA4.crl|Download (GEANT.crl.sectigo.com)]] |
  
 +^ Certificate chain (intermediate only)  | {{ :​certs:​chain_geant_ov_rsa_ca_4.pem | Download (PEM)}} |
 +^ Certificate chain (full chain) | {{ :​certs:​chain_geant_ov_rsa_ca_4_full.pem | Download (PEM)}} |
Poslední úprava:: 2023/11/02 15:50