SSL Certificates, Certificate Service

This page contains information about how to get SSL and Code Signing Certificates.

The Technology Services Certificate Service provides SSL and Code Signing certificates to Urbana campus users. Below you will find general information on certificates that IT Pros can request via the InCommon Self-Service Web Portal. If you are a campus IT Pro and would like to obtain an account to use this system, please complete a request at

Types of Certificates Offered via Self-Service

SSL Certificate

A single-domain webserver certificate needed to enable SSL operation on your server.

Multi-Domain SSL Certificate (SAN Certificate)

A SAN (Subject Alternate Name) certificate has a field that specifies alternate FQDN’s that can use the certificate.

Other Certificate Types (special request)

Wildcard SSL Certificates

Privacy and Information Security permits Wildcard SSL certificates (example: * to be issued only in certain cases where there is a technical need and security concerns have been addressed. To obtain Wildcard certificates, please send email to with a brief justification of why a wildcard certificate is needed.

Code Signing Certificates

Privacy and Information Security permits Code Signing certificates to be issued in cases where there is a technical need and security concerns have been addressed. To obtain a Code Signing certificate, please send email to with a brief justification of why a Code Signing certificate is needed.

EV/Personal Signing Certificates

These are not currently available but may be offered at a later date.

General Certificate Policies


As of August 2018, there is no charge for SSL certificates.

Key Size

As of Monday March 16, 2009 Privacy and Information Security is only accepting certificate requests with a key size of 2048 bits or higher. The self-service web interface will not accept CSR's with key sizes lower than 2048-bit. 

SAN Certificate FQDN Limit

As of January 18, 2011, Privacy and Information Security permits up to 20 FQDN's to be secured with a single SAN certificate. For exceptions to this rule, please contact Privacy and Information Security at with a brief justification of why more than 20 FQDN's is needed.

Expiration and Renewals

When you request a certificate using the InCommon Self-Service Web Portal, you will be the one to receive expiration notices for all certificates you request unless you have provided alternate contacts for the certificate. Please ensure that the email addresses that are entered in this field are correct and that they accept incoming email (i.e., often mailing list service addresses are restricted). To request or renew a certificate, visit the SSL Certificate Request page.

Additional Information

If you have any questions about SSL certificate services or encounter any additional issues not covered by the documentation here, email us at

Keywords:SSL certificate code signing SAN CSR security wildcard domain FQDN incommon sectigo comodo   Doc ID:47662
Owner:Security S.Group:University of Illinois Technology Services
Created:2015-02-26 12:25 CDTUpdated:2019-07-18 12:10 CDT
Sites:University of Illinois Technology Services
Feedback:  1   0