Last updated: 
2 months 1 week ago
Group Manager
Welcome to the Jisc Certificate Service group. The service offers a number of different X509 SSL certificates, including Extended Validation certificates that give users the highest possible assurance, as well as S/MIME email certificates for digitally signing emails. Jisc has an agreement with the Certificate Authority, QuoVadis who is the provider of the certificates. The service has been running since 2006 and has issued many thousands of certificates to organisations in UK research and education. This is a Community group where users can obtain relevant information, receive service updates and provide feedback.

Underscores in DNs

12 September 2019 at 2:44pm

Back in the day (early UK e-Science days), we had University of XXXX asking for O=University_of_XXXX: it led to the DN being encoded as BMPString which was not good; it should have been printableString, but underscore is not allowed for printableString (see RFC2252) - these days one would use the UTF8 encoding, but we still recommend that people not use underscores and other naughty characters, like '@' in DNs. See http://www.ogf.org/documents/GFD.225.pdf