Get CertificatesForms and TemplatesPolicies, Root Certificate, CRL, OCSPTests and Demos

Get Certificates

The eduPKI CA issues certificates according to specific Trust Profiles defined by the eduPKI PMA. Currently there are three Trust Profiles supported by the eduPKI CA:

See below how to obtain a certificate

... for eduroam

The eduPKI CA provides server certificates for RADIUS infrastructure servers. eduroam server administrators may either apply for a server certificate via this web form uploading a matching PKCS#10 CSR or may obtain certificates using the eduroam Certificate Request Generator. If using the latter please make sure you have a Java Runtime Environment (JRE)  (version >= 1.6) installed on your computer before you proceed as described:

  • Start the Java WebStart Application by clicking

  • Enter certificate data and requester data and press the "generate request" button.
    The generator will 

    • generate a key pair and a certificate signing request (CSR)
    • submit an electronic certificate application to the eduroam Registration Authority (eduroam RA)
    • produce a PDF certificate application form and ask where to store the private key, the CSR and the PDF

In both cases you have to send the generated PDF certificate application form to eduroam's eduPKI RA in a way that they can check its authenticity and integrity (e.g. via S/MIME or PGP signed email).

You will receive your eduroam certificate by email as soon as the eduroam RA has approved your certificate application.

Information about eduroam certificates and the approval of certificate requests by the eduroam RA see:
eduPKI eduroam RA (eduroam website)

... for GÉANT's Multi-Domain Network Services

The eduPKI CA provides server and client machine certificates for GÉANT's Multi-Domain Network Services infrastructure. Machine administrators may either apply for a certificate via this web form uploading a matching PKCS#10 CSR or may obtain certificates using the Multi-Domain Network Services Certificate Request Generator. If using the latter please make sure you have a Java Runtime Environment (JRE)  (version >= 1.6) installed on your computer before you proceed as described:

In both cases you have to send the generated PDF certificate application form to the Multi-Domain Network Services RA in a way that they can check its authenticity and integrity (e.g. via S/MIME or PGP signed email).

You will receive your Multi-Domain Network Services certificate by email as soon as the Multi-Domain Network Services RA has approved your certificate application.

Information about GÉANT's Multi-Domain Network Services certificates and the approval of certificate requests by GÉANT's Multi-Domain Network Services Registration Authority see:
MDNS RA (GÉANT website)