Library items tagged: certificates

Released 1st April 2021 Updated 16th April 2021 Updated 20th April 2023 This advisory applies to all organisations providing a Home (IdP) service who wish to support users on Android 11 devices. A number of issues have arisen simultaneously which have resulted in a complex situation which requires a careful response from member organisations to avoid user disappointment. The recommended actions are summarised at the bottom of this page.
Buried in the historic mail archives (and likely in some older eduroam documentation) are advisories concerning the type of RADIUS certificate that eduroam(UK) participants should be using.  Basically, do not use MD5 certificates. For some time now, MD5 has been deprecated and over the past few years Operating Systems have been dropping support for such certificates. e.g.  (since iOS 5 MD5 certs are only valid for CA certs not server certs)
2020 - Please Refere to - Archive:
Jisc Certificate Service Jisc is able to provide subscribers of the Certificate Service with a range of server and S/MIME email certificates issued by QuoVadis CA. ----- All certificates issued are SHA-256. ----- 1. QuoVadis Extended Validation (EV) SSL certificate - recommended by Jisc for high profile web services
PB/INFO/003 (06/06) It is relatively easy to create an electronic mail message that appears, superficially at least, to come from someone else. It is therefore useful to be able to ‘sign’ e-mails, as we use ink signatures on paper documents and letters, to give stronger proof of their origin. There are systems that allow such signatures to be created using certificates and certification agencies, however the most commonly used system, Pretty Good Privacy (PGP), uses a different approach and terminology.
Q. What organisations are eligible to join this service? A. Organisations can check their eligibility for this service here. Q. How much does a certificate cost? A. Currently Janet will absorb the cost of providing Janet Certificate Service, but from 3 June 2013 there will be a charge applied for obtaining SSL certificates from the service.