SSL Certificates, Certificate Service
This page contains information about how to get SSL and Code Signing Certificates.
A single-domain webserver certificate needed to enable SSL operation on your server.
Multi-Domain SSL Certificate (SAN Certificate)
A SAN (Subject Alternate Name) certificate has a field that specifies alternate FQDN’s that can use the certificate.
Other Certificate Types (special request)
Wildcard SSL Certificates
Privacy and Information Security permits Wildcard SSL certificates (example: *.dept.illinois.edu) to be issued only in certain cases where there is a technical need and security concerns have been addressed. To obtain Wildcard certificates, please send email to email@example.com with a brief justification of why a wildcard certificate is needed.
Code Signing Certificates
Privacy and Information Security permits Code Signing certificates to be issued in cases where there is a technical need and security concerns have been addressed. To obtain a Code Signing certificate, please send email to firstname.lastname@example.org with a brief justification of why a Code Signing certificate is needed.
EV/Personal Signing Certificates
These are not currently available but may be offered at a later date.
As of August 2018, there is no charge for SSL certificates.
As of Monday March 16, 2009 Privacy and Information Security is only accepting certificate requests with a key size of 2048 bits or higher. The self-service web interface will not accept CSR's with key sizes lower than 2048-bit.
SAN Certificate FQDN Limit
As of January 18, 2011, Privacy and Information Security permits up to 20 FQDN's to be secured with a single SAN certificate. For exceptions to this rule, please contact Privacy and Information Security at email@example.com with a brief justification of why more than 20 FQDN's is needed.
Expiration and Renewals
When you request a certificate using the InCommon Self-Service Web Portal, you will be the one to receive expiration notices for all certificates you request unless you have provided alternate contacts for the certificate. Please ensure that the email addresses that are entered in this field are correct and that they accept incoming email (i.e., often mailing list service addresses are restricted). To request or renew a certificate, visit the SSL Certificate Request page.
If you have any questions about SSL certificate services or encounter any additional issues not covered by the documentation here, email us at firstname.lastname@example.org.