On this page, you will learn how to apply for SSL certificates offered by the current certificate provider via the RA-Portal.

The RA-Portal is only available within the RWTH network. The login is realized via the RWTH Single Sign-On.

Authorization of the user is based on the CN/SANs DNS resolution, user rights are sourced from the Right-Manager.

Contact groups that were created directly in the Right-Manager are not transmitted to the RA-Portal via RWTH Single Sign-On. As a result, members of these groups cannot be identified as such in the RA-Portal. In such cases, the certificate application must be moderated by the RWTH registration authority. The identified group is marked with a red warning triangle in the RA-Portal. This also has implications for the management of issued certificates, i.e., only the applicant, but not the members of the contact group, can view, download, renew, or revoke the certificate.

To apply for a certificate, please upload your CSR file into the RA-Portal:

• Fill out the Distinguished Name (Subject in CSR) for GÉANT/TCS server certificate applications as following:
  • C = DE
  • T = Nordrhein-Westfalen
  • L = Aachen
  • O = RWTH Aachen University
  • CN = <fqdn> (must be DNS resolvable)
• SAN may contain the following:
  • The CN must occur in the SAN (CA/Browser Forum requirement)
  • One or more FQDNs (all must be resolvable in DNS)
  • IP address that is reverse resolvable in DNS (IP addresses are theoretically allowed, but must be individually domain validated by the certification authority, hence practically not possible)

Certificates are issued

• automatically, if the user is authorized
• following approval by authorized network contact persons
• in all other cases following approval by the RWTH Registration Authority (RWTH RA)

You will get an email notification when the certificate is issued and will be able to dowmload the certificate and the certificate chain via the RA-Portal. 

If you have further questions, please contact the IT-ServiceDesk.