IT Center Help

You are located in service: Public Key Certificates

Certificate Chain of the DFN-PKI

Kurzinformation

What is this about

In a Public Key Infrastructure, a root certificate identifies a root certificate authority (CA). Root certificates are self-signed and implicitly trustworthy. All subordinate certificates inherit the trustworthiness of the root certificate, thus creating a trustworthy certificate chain. The root certificate of the DFN-PKI chain is preinstalled in most common browsers and e-mail applications.

Detailinformation

The Root Certificate (issued by T-TeleSec ) of the DFN-PKI certificate chain is build-into most common browsers and e-mail programs.

The certificate chain of the DFN-PKI is shown in short below:

CN=T-TeleSec GlobalRoot Class 2	Serial Number 01, valid till 02.10.2033 Fingerprints: SHA-256 91:E2:F5:78:8D:58:10:EB:A7:BA:58:73:7D:E1:54:8A:8E:CA:CD:01:45:98:BC:0B:14:3E:04:1B:17:05:25:52 SHA-1 59:0D:2D:7D:88:4F:40:2E:61:7E:A5:62:32:17:65:CF:17:D8:94:E9
CN=DFN-Verein Certification Authority 2	Serial Number 00:E3:0B:D5:F8:AF:25:D9:81, valid till 23.02.2031 Fingerprints: SHA-256 F6:60:B0:C2:56:48:1C:B2:BF:C6:76:61:C1:EA:8F:EE:E3:95:B7:14:1B:CA:C3:6C:36:E0:4D:08:CD:9E:15:82 SHA-1 E2:24:BE:F6:D7:86:22:0D:26:2B:B8:07:AB:6D:AC:F9:D3:A8:9A:93
CN=DFN-Verein Global Issuing CA	Serial Number 1B:63:BA:D0:1E:2C:3D, valid till 23.02.2031 Fingerprints: SHA-256 12:57:AA:C2:F4:EE:AC:6C:A4:94:2C:2C:83:F0:B6:7B:41:A3:B4:71:20:C4:D5:34:29:92:95:13:AC:AD:46:8C SHA-1 C9:DC:B0:47:AC:8C:5F:09:05:ED:77:52:8C:BD:4B:84:D9:46:3C:45

Download certificates in the DFN-PKI chain

Please only use these certificates (T-TeleSec GlobalRoot Class 2) of the DFN-PKI for your eduroam configuration - applies to following realms

@rwth-aachen.de
@rwth.edufi.de
@fzj.edufi.de
@rwth.edu-wifi.org
@fzj.edu-wifi.org

See also add or remove certificates in Android 8.0 or newer.

Certificates DFN-PKI-G2	CER-format (Base-64-encoding)	DER-format	PEM-format
T-TeleSec GlobalRoot Class 2	rootcert_telesec.crt (Android,MacOS, Windows)		rootcert_telesec.pem (Linux)
DFN-Verein Certification Authority 2	intermediatecacert.crt (Android, Windows)	intermediatecacert.der (Windows)	intermediatecacert.pem (Linux)
DFN-Verein Global Issuing CA	cacert.crt (Android, Windows)	cacert.der (Windows)	cacert.pem (Linux)

Certificate Chain DFN-PKI

Here ist the DFN-PKI certificate chain as a single file in PEM-format.

Certificate Chain (PEM Format)

The certificate chain can be saved under any chosen name as a file with extension ".pem", under the path "/etc/ssl/certs/" and can be integrated afterwards.

Sources

Overview of the DFN-PKI Certificate Chain
The RWTH-DFN certification portal
Overview of the "old" RWTH CA (DFN-PKI-G1) Certificate Chain
Download the certificates of the "old" RWTH CA (DFN-PKI-G1) chain

DO NOT use these certificates for setting up eduroam, but use the certificates of the new DFN-PKI-G2 (see above).

Certificates in DFN-PKI-G1	CER-format (Base-64-encoding)	DER-format	PEM-format
Deutsche Telekom Root CA 2	rootcert.cer (Android, Windows)	Root cacert.der (Windows)	Root cacert.pem (Linux)
DFN-Verein PCA Global - G01	dfncacert.cer (Android, Windows)	DFN cacert.der (Windows)	DFN cacert.pem (Linux)
RWTH Aachen CA	rwthcacert.cer (Android, Windows)	RWTH cacert.der (Windows)	RWTH cacert.pem (Linux)

Certificat Chain DFN-PKI-G1

Certificate Chain (PEM Format)

The certificate chain can be saved under any chosen name, file extension ".pem", path is "/etc/ssl/certs/" and can be integrated afterwards.

last changed on 04/23/2024

How did this content help you?

This work is licensed under a Creative Commons Attribution - Share Alike 3.0 Germany License