Get CertificatesForms and TemplatesPolicies, Root Certificate, CRL, OCSPTests and Demos

Get Certificates

The eduPKI CA issues certificates according to specific Trust Profiles defined by the eduPKI PMA. Currently there are two Trust Profiles supported by the eduPKI CA:

See below how to obtain a certificate

... for eduroam

The eduPKI CA provides server certificates for RADIUS infrastructure servers. eduroam server administrators can obtain certificates using the eduroam Certificate Request Generator. Please make sure you have a Java Runtime Environment (JRE)  (version >= 1.6) installed on your computer before you proceed as described:

  • Start the Java WebStart Application by clicking
  • Enter certificate data and requester data and press the "generate request" button.
    The generator will 
    • generate a key pair and a certificate signing request (CSR)
    • submit an electronic certificate application to the eduroam Registration Authority (eduroam RA)
    • produce a PDF certificate application form and ask where to store the private key, the CSR and the PDF
    You have to
    • Send PDF certificate application form in S/MIME or PGP signed email to the eduroam RA.

You will receive your eduroam certificate by email as soon as the eduroam RA has approved your certificate application.

Information about eduroam certificates and the approval of certificate requests by the eduroam RA see:
eduPKI eduroam RA (eduroam website)

... for GÉANT's Multi-Domain Network Services

The eduPKI CA provides server and client machine certificates for GÉANT's Multi-Domain Network Services infrastructure. Machine administrators can obtain certificates using the Multi-Domain Network Services Certificate Request Generator. Please make sure you have a Java Runtime Environment (JRE)  (version >= 1.6) installed on your computer before you proceed as described:

  • Make yourself familiar with the prerequisites of getting a Certificate for GÉANT's Multi-Domain Network Services from the Multi-Domain Network Services Registration Authority.
  • Start the Java WebStart Application by clicking
  • Enter certificate data and requester data and press the "generate request" button.
    The generator will 
    • generate a key pair and a certificate signing request (CSR)
    • submit an electronic certificate application to the Multi-Domain Network Services Registration Authority (Multi-Domain Network Services RA)
    • produce a PDF certificate application form and ask where to store the private key, the CSR and the PDF
    You have to
    • Send PDF certificate application form in S/MIME or PGP signed email to the Multi-Domain Network Services RA.

You will receive your Multi-Domain Network Services certificate by email as soon as the Multi-Domain Network Services RA has approved your certificate application.

Information about GÉANT's Multi-Domain Network Services certificates and the approval of certificate requests by GÉANT's Multi-Domain Network Services Registration Authority see:
MDNS RA (GÉANT website)

... for GÉANT IT

The eduPKI CA provides server and client machine certificates for GÉANT's IT infrastructure. Machine administrators can obtain certificates using the GÉANT IT Certificate Request Generator. Please make sure you have a Java Runtime Environment (JRE)  (version >= 1.6) installed on your computer before you proceed as described:

  • Start the Java WebStart Application by clicking
  • Enter certificate data and requester data and press the "generate request" button.
    The generator will 
    • generate a key pair and a certificate signing request (CSR)
    • submit an electronic certificate application to the  GÉANT IT Registration Authority ( GÉANT IT RA)
    • produce a PDF certificate application form and ask where to store the private key, the CSR and the PDF
    You have to
    • Send PDF certificate application form in S/MIME or PGP signed email to the GÉANT IT RA.

You will receive your  GÉANT IT certificate by email as soon as the  GÉANT IT RA has approved your certificate application.