Tip | ||
---|---|---|
| ||
The use of single sign-on and multifactor authentication for accessing the Comodo Certificate Manager is available to any subscriber that also operates an Identity Provider in the InCommon Federation. See this wiki page for details. |
InCommon Certificate Types
This page includes links to technical documents and service endpoints for each of the certificate types issued by the InCommon Certificate Service.
...
The intermediate CA known as the InCommon RSA Server CA, which uses the SHA-2 hash algorithm, was deployed on September 22, 2014.
- Certificate Chain (Comodo's version of the chain):
- Certification Practices Statement for OV SSL/TLS Certificates
Certificate Revocation List:
HTML Wiki Markup {html}http://crl.incommon-rsa.org/InCommonRSAServerCA.crl{html}
Online Certificate Status Protocol:
{html}Wiki Markup HTML http://ocsp.incommon-rsa.org
Tip |
---|
To test the freshness of the CRL, type the following command:
|
...
|
...
|
Anchor | ||||
---|---|---|---|---|
|
...
Extended Validation SSL/TLS Certificates
The intermediate CA known as the InCommon Server CA was deployed on February 1, 2011. Prior to that date, Organizational Validation (OV) SSL/TLS end-entity certificates were signed by the COMODO High Assurance Secure Server CAExtended Validation (EV) SSL/TLS Certificates became available on March 10, 2011.
Certificate Chain:
HTML Wiki Markup {html} <br><span style="margin-left: 3em; line-height: 150%"><a href="https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=10&nav=0,1">AddTrust External CA Root</a> [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.pem">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%">InCommon Server CA><a href="https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=104&nav=0,1,22">COMODO Certification Authority</a> [<a href="https://www.incommon.org/cert/repository/COMODOAddTrustServerCA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/COMODOAddTrustServerCA.pem">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%"><a href="https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=103&nav=0,1,22">COMODO Extended Validation Secure Server CA</a> [<a href="https://www.incommon.org/cert/repository/InCommonServerCACOMODOExtendedValidationSecureServerCA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/InCommonServerCACOMODOExtendedValidationSecureServerCA.pem">PEM</a>]</span> <br><span style="margin-left: 7em9em; line-height: 150%">End-Entity Certificate</span> {html}
- Intermediate CA Bundle for OV EV SSL/TLS Certificates
- Certification Practices Statement for OV EV SSL/TLS Certificates
- Certificate Profile for OV EV SSL/TLS Certificates
Certificate Revocation List:
HTML Wiki Markup {html}http://crl.incommoncomodoca.orgcom
/
InCommonServerCACOMODOExtendedValidationSecureServerCA.crl
{html}Online Certificate Status Protocol:
HTML Wiki Markup {html}http://ocsp.incommon.org{html}
...
To test the freshness of the CRL, type the following command:
comodoca.com
IGTF Server Certificates
InCommon offers IGTF server certificates for use by subscribers who are also active with the IGTF grid community. Note: Unless you are running a server as part of the IGTF grid (see the IGTF website) these certificates are NOT what you need. Request a normal InCommon server certificate instead.
The intermediate CA known as the InCommon IGTF Server CA was deployed on July 7, 2014.
- Certificate Chain:
...
- Certificate Revocation List:
...
...
- Online Certificate Status Protocol: http://ocsp.incommon-igtf.org
- Certification Practices Statement for IGTF certificates
Anchor | ||||
---|---|---|---|---|
|
Client Certificates
SHA-2 Standard Assurance Client Certificates
The intermediate CA known as the InCommon RSA Standard Assurance Client CA was deployed on September 18, 2014
...
Extended Validation SSL/TLS Certificates
Extended Validation (EV) SSL/TLS Certificates became available on March 10, 2011.
- Certificate Chain:
HTML |
---|
<br><span style="margin-left: 3em; line-height: 150% |
...
" |
...
>AddTrust External CA |
...
Root [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.pem">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%" |
...
>USERTrust RSA Certification Authority [<a href="https://www.incommon.org/cert/repository/ |
...
USERTrustRSAClient_CA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/ |
...
USERTrustRSAClient_CA.pem">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%" |
...
>InCommon RSA Standard Assurance Client CA [<a href="https://www.incommon.org/cert/repository/ |
...
InCommonRSAStandardAssuranceClientCA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/ |
...
InCommonRSAStandardAssuranceClientCA.pem">PEM</a>]</span> <br><span style="margin-left: 9em; line-height: 150%">End-Entity Certificate</span> |
...
- for EV SSL/TLS
- for Standard Client Certificates
- Certification Practices Statement
for EV SSL/TLS - for Standard Client Certificates
Certificate
Profile for EV SSL/TLS CertificatesCertificate Revocation List:
unmigrated-inline-wiki-markupHTML
}http://
ocsp.comodoca.com{html}
/COMODOExtendedValidationSecureServerCA.crl
Online Certificate Status Protocol:
IGTF Server Certificates
The intermediate CA known as the InCommon IGTF Server CA was deployed on July 7, 2014.
- Certificate Chain:
- Certificate Revocation List: http://
crl.incommon-
igtfrsa.org/
InCommonIGTFServerCAInCommonRSAStandardAssuranceClientCA.crl
Online Certificate Status Protocol:
HTML http://ocsp.incommon-
igtfrsa.org
- Repository: https://www.incommon.org/certificates/igtf/
...
...
Client Certificates
SHA-1 Standard Assurance Client Certificates (deprecated)
The intermediate CA known as the InCommon Standard Assurance Client CA was deployed on March 10, 2011.
- {html}
Certificate Chain:
HTML
<br><span style="margin-left: 3em; line-height: 150%"><a href="https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=10&nav=0,1">AddTrust External CA Root</a> [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.pem">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%"><a href="https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=114&nav=0,1">UTN-USERFirst-Client Authentication and Email</a> [<a href="https://www.incommon.org/cert/repository/UTNAddTrustClient_CA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/UTNAddTrustClient_CA.pem">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%">InCommon Standard Assurance Client CA [<a href="https://www.incommon.org/cert/repository/InCommonStandardAssuranceClientCA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/InCommonStandardAssuranceClientCA.pem">PEM</a>]</span> <br><span style="margin-left: 9em; line-height: 150%">End-Entity Certificate</span>
{html}
- {html}
- Intermediate CA Bundle for Standard Client Certificates
- Certification Practices Statement for Standard Client Certificates
- Certificate Profile for Standard Client Certificates
Certificate Revocation List:
HTML
http://crl.incommon.org/InCommonStandardAssuranceClientCA.crl
{html}Online Certificate Status Protocol:
HTML http://ocsp.incommon.org
{html}
Anchor | ||||
---|---|---|---|---|
|
Code-signing Certificates
The intermediate CA known as the InCommon RSA Code Signing CA (SHA-2) was deployed on September 19, 2014.
- Certificate Chain
- Please click here to see the cert chain: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/992/108/incommon-code-signing-sha-2
- Certificate Chain
The intermediate CA known as the InCommon Code Signing CA (SHA-1) was deployed on June 30, 2011.
- {html}
Certificate Chain:
HTML
<br><span style="margin-left: 3em; line-height: 150%"><a href="https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=10&nav=0,1">AddTrust External CA Root</a> [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/AddTrustExternalCARoot.pem">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%"><a href="https://support.comodo.com/index.php?_m=downloads&_a=view&parentcategoryid=24&pcid=1&nav=0,1">UTN-USERFirst-Object</a> [<a href="https://www.incommon.org/cert/repository/UTN-USERFirst-Object.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/UTN-USERFirst-Object.pem">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%">InCommon Code Signing CA [<a href="https://www.incommon.org/cert/repository/InCommonCodeSigningCA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/InCommonCodeSigningCA.pem">PEM</a>]</span> <br><span style="margin-left: 9em; line-height: 150%">End-Entity Certificate</span>
{html}
The following information is common to both the SHA-1 and SHA-2
...
InCommon intermediate CAs:
- {html}
- Certification Practices Statement for Code-Signing Certificates
Certificate Revocation List:
HTML
http://crl.incommon.org/InCommonCodeSigningCA.crl
{html}Online Certificate Status Protocol:
HTML http://ocsp.incommon.org
{html}
...