The use of single sign-on and multifactor authentication for accessing the Comodo Certificate Manager is available to any subscriber that also operates an Identity Provider in the InCommon Federation. See this wiki page for details. |
This page includes links to technical documents and service endpoints for each of the certificate types issued by the InCommon Certificate Service.
Contents:
The intermediate CA known as the "InCommon RSA Server CA 2", which uses the SHA-2 hash algorithm, was deployed on November 1, 2023.
Certificate Revocation List:
http://crl.sectigo.com/InCommonRSAServerCA2.crl |
Online Certificate Status Protocol:
http://ocsp.sectigo.com |
To test the freshness of the CRL, type the following command:
|
Extended Validation (EV) SSL/TLS Certificates became available on March 10, 2011.
Certificate Chain:
<br><span style="margin-left: 3em; line-height: 150%">AAA Certificate Services [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/AAA%20Certificate%20Services.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%">USERTrust RSA Certification Authority [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/USERTrust%20RSA%20Certification%20Authority.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%">Sectigo RSA Extended Validation Secure Server CA [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/Sectigo%20RSA%20Extended%20Validation%20Secure%20Server%20CA.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 9em; line-height: 150%">End-Entity Certificate</span> |
Certificate Revocation List:
http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl |
Online Certificate Status Protocol:
http://ocsp.sectigo.com |
InCommon offers IGTF server certificates for use by subscribers who are also active with the IGTF grid community. Note: Unless you are running a server as part of the IGTF grid (see the IGTF website) these certificates are NOT what you need. Request a normal InCommon server certificate instead.
The intermediate CA known as the InCommon RSA IGTF Server CA 3 was deployed on July 17, 2023.
The intermediate CA known as the InCommon RSA Standard Assurance Client CA was deployed on September 18, 2014.
<br><span style="margin-left: 3em; line-height: 150%">AAA Certificate Services [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/AAA%20Certificate%20Services.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%">USERTrust RSA Certification Authority [<a href="https://www.incommon.org/cert/repository/USERTrustRSAClient_CA.txt">Text</a>] [<a href="https://www.incommon.org/cert/repository/USERTrustRSAClient_CA.pem">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%">InCommon RSA Standard Assurance Client CA 2 [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Standard%20Assurance%20Client%20CA%202.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 9em; line-height: 150%">End-Entity Certificate</span> |
Certificate Revocation List:
http://crl.incommon-rsa.org/InCommonRSAStandardAssuranceClientCA.crl |
Online Certificate Status Protocol:
http://ocsp.incommon-rsa.org |
The intermediate CA known as the InCommon RSA Code Signing CA (SHA-2) was deployed on September 19, 2014.
The intermediate CA known as the InCommon Code Signing CA (SHA-1) was deployed on June 30, 2011.
Certificate Chain:
<br><span style="margin-left: 3em; line-height: 150%">AAA Certificate Services [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/AAA%20Certificate%20Services.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 5em; line-height: 150%">Sectigo Public Code Signing Root R46 [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/Sectigo%20Public%20Code%20Signing%20Root%20R46.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 7em; line-height: 150%">Sectigo Public Code Signing CA R36 [<a href="https://spaces.at.internet2.edu/download/attachments/24576265/Sectigo%20Public%20Code%20Signing%20CA%20R36.pem?api=v2">PEM</a>]</span> <br><span style="margin-left: 9em; line-height: 150%">End-Entity Certificate</span> |
The following information is common to both the SHA-1 and SHA-2 InCommon intermediate CAs:
Certificate Revocation List:
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl |
Online Certificate Status Protocol:
http://ocsp.sectigo.com |