VT PKI - Certificate Chains


Introduction

Table of Contents

Best Practices

Please find the recommended best practices for maintaining (Web) server certificates for systems and software at Virginia Tech:

https://middleware.vt.edu/certs/practices.html

Certificate Chains

InCommon TLS Server CA 

Please refer to the Org validated RSA/ECC keys for the root certificates:

https://spaces.at.internet2.edu/spaces/CERTSVC/pages/394592634/InCommon+Intermediate+CAs

InCommon Personal Digital Certificate (PDC) CA

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New
Jersey, C=US
 
CRL: http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
 
CA certificate: https://www.pki.vt.edu/USERTrustRSACertificationAuthority.pem
 
SHA256 Fingerprint: E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
 
C=GB, O=Sectigo Limited, CN=Sectigo Public Email Protection Root R46
 
CRL: http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
 
CA certificate: https://www.pki.vt.edu/Sectigo_Public_Email_Protection_Root_R46.pem
 
SHA256 Fingerprint=BC:38:6A:5C:66:4B:6B:0B:5E:38:5F:AC:15:1A:A3:91:16:06:17:83:59:DE:D6:8A:E5:01:7D:E9:85:E7:8B:94
 
 
C=US, O=Internet2, CN=InCommon RSA Secure Email CA 3
 
CRL: http://crl.sectigo.com/SectigoPublicEmailProtectionRootR46.crl
 
CA certificate: https://www.pki.vt.edu/InCommon_RSA_Secure_Email_CA_3.pem
 
SHA256 Fingerprint=94:A3:CF:64:53:71:34:D8:25:36:45:09:9C:89:2F:42:EF:A9:E2:38:F4:0F:E0:EF:0D:C4:E5:21:E0:9D:57:56
 

Middleware Root CA

CN = Middleware Root,OU = Middleware,O = Virginia Tech

CA certificate: Download as DER

SHA256 Fingerprint: 3F:55:B3:34:99:59:EF:83:74:A6:EE:EA:DF:E7:E1:F7:47:3A:B6:29:59:F8:3F:F7:28:F3:16:6C:31:AD:12:AC

MD5 Fingerprint: DD:EF:9E:AF:EA:7F:09:C6:FF:2C:E7:AD:47:06:15:3C