You are located in service: Certificates

Possible Ways of Identity Verification

Possible Ways of Identity Verification


Special regulations in the corona situation

  • You already have a user certificate from the DFN-PKI, which may e.g. soon expire, and you wish to apply for a new one.

Send the dated, signed by hand and scanned user certificate application form in a signed e-mail to We urge you to also encrypt this e-mail, in order to protect your handwritten signature from prying eyes. Please note, that this e-mail must be sent from the e-mail address for which the new certificate is to be issued. For group certificates, however, the e-mail must be sent from the applicant's personal e-mail account and not from the functional e-mail address.

  • You do not have a still valid user from the DFN-PKI.

As of Thursday 14.05.2020, you can bring your certificate application form to the IT-ServiceDesk in Seffenter Weg. Don't forget to carry a valid personal identification document. In order to visit the IT-ServiceDesk, you need to have booked an appointment online in advance. Here you find the relevant information on how to book such an appointment:

  • If it is not possible for you to personally visit the IT-ServiceDesk, e.g. you are not in Aachen or you belong to a high risk group in the current situation, please forward this information by e-mail to .


Application for a User Certificate

User Certificates issued by the DFN-PKI contain the applicant's first and last name in the field "Common Name". Consequently, the applicant is required to bring their application in person and undergo a personal identification at the IT-ServiceDesk. The SD personnel will prove your identity, based on a valid identification document, which you are required to present.

Application for a Server Certificate

  1. You can bring the application in person to the IT-ServiceDesk, please carry a valid identification document.
  2. Send the application per e-mail as follows:
    • please date and sign the application by hand, then scan it and send the pdf document per electronically signed email to
    • please note that the electronically signed email needs to be sent from your own email account, we can only verify your identity if the corresponding DFN-PKI user certificate has been issued for "CN=Firstname Lastname". Emails sent from email accounts used by more than person (functional e-mail accounts) will not be accepted.

Application for a Group Certificate

Can be submitted as if it was a server certificate application.