Last updated: 
2 days 9 hours ago
Group Manager
Welcome to the Jisc Certificate Service group. The service offers a number of different X509 SSL certificates, including Extended Validation certificates that give users the highest possible assurance, as well as S/MIME email certificates for digitally signing emails. Jisc has an agreement with the Certificate Authority, QuoVadis who is the provider of the certificates. The service has been running since 2006 and has issued many thousands of certificates to organisations in UK research and education. This is a Community group where users can obtain relevant information, receive service updates and provide feedback.

Certificate - CSR Organization Unit Changes

6 August 2020 at 12:17pm

Our certificate authority, QuoVadis, will start to restrict what can and cannot be entered in the 'OU' field (Organization Unit) for certificate requests. The 'OU' field, if required, is designed for divisions and departments within the organisation it is not mandatory and can be left blank.

We have a number of certificates historically issued where the Organization Unit field has random entries such as copying the Organisation name, random numbers, addresses and domain names listed in them. These type of entries will no longer be accepted and if entered into the request will cause delays in issuing the certificate as the request will be returned, the CSR (Certificate Signing Request) will need to be recreated and the certificate requested again.

The 'OU' field is designed for departments within the organisation such as IT, HR, Finance if it is not required we would  recommend the field is left blank as it is not a mandatory field. There may be exceptions where we can add an OU entry to the allowed list if required with good reasoning, but hopefully we have captured them all already from the history.

We believe this will not affect the majority of our users but wanted to give warning of this change if you do have a certificate request returned for this reason.

If you have any questions please email us at certificates@jisc.ac.uk.