CA certificates

The table below lists all ever used X.509 certificates of the WWUCA as well as the respective superordinate certification authorities in different formats. The years indicate the periods of use, not the periods of validity.

For security reasons certificates are always used for a limited period only as specified in the certification policies. Thereafter new certificates are used. The old certificates remain valid until their end of life, however, and are still needed to check the certificates issued with them.

When clicking on Import the certificate is downloaded in binary format for automatically importing into your WWW program. When clicking on Binary the certificate is downloaded in the same format but for saving as file. When clicking on Text the certificate is downloaded in PEM format for saving.

 

X.509 WWUCA

X.509 DFN-PCA

X.509 root CA

X.509 chain (see below)

Jetzt

DFN-Verein Global Issuing CA

Import (.der)
Import (.cer)
Binary
Text

DFN-Verein Certification Authority 2

Import (.der)
Import (.cer)
Binary
Text

T-TeleSec GlobalRoot Class 2

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

Text (current and historic CA certificates)

2028

2016

DFN-Verein Global Issuing CA

Import (.der)
Import (.cer)
Binary
Text

DFN-Verein Certification Authority 2

Import (.der)
Import (.cer)
Binary
Text

T-TeleSec GlobalRoot Class 2

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

2016

2014

Zertifizierungsstelle Universitaet Muenster - G02

Import (.der)
Import (.cer)
Binary
Text

DFN-Verein PCA Global - G01

Import (.der)
Import (.cer)
Binary
Text

Deutsche Telekom Root CA 2

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

2014

Import (.der)
Import (.cer)
Binary
Text

(revoked)

Text (with root)
Text (without root)

(revoked)

2014

2007

Import (.der)
Import (.cer)
Binary
Text

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

2007

2006

Zertifizierungsstelle Universitaet Muenster (Classic) 2006-2007

Import (.der)
Import (.cer)
Binary
Text

DFN-Verein PCA Classic - G01

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

2005

2004

Zertifizierungsstelle 2004-2005

Import (.der)
Import (.cer)
Binary
Text

DFN Toplevel Certification Authority

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

2003

2002

Zertifizierungsstelle 2002-2003

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

2001

2000

Zertifizierungsstelle 2002-2003

Import (.der)
Import (.cer)
Binary
Text

DFN Top Level Certification Authority

Import (.der)
Import (.cer)
Binary
Text

Text (with root)
Text (without root)

The column X.509 chain lists files containing the certificates of the WWUCA and the superordinate certification authorities, both with and without the respective root certificate. Operators of Apache WWW servers should download the file without root certificate and indicate this file in the configuration option SSLCertificateChainFile to save the users from importing the WWUCA certificate into their browsers.

Operators of other SSL/TLS server software should indicate in the configuration first the private key of the server, second the certificate of the server, and third the chain without root. With some software it may be necessary to merge all three parts in this order, perhaps separated by an empty line, into a simple text file and to indicate this file in the configuration.

 

For completeness the OpenPGP keys formerly used for certification are listed here.

 

PGP WWUCA

PGP DFN-PCA

 

(Service discontinued by the end of 2011)

(Service discontinued by the end of 2009)

2011 ← 2010

Text

2009 ← 2008

Text

Text

2007 ← 2006

Text

2005 ← 2004

Text

Text

2003 ← 2002

Text

Text

2001

Text

Text

2000

Text

1999

Text
(predecessor)

1998 ← 1997

Text