Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Formal name of the Legal Entity;
  2. A registered Assumed Name for the Legal Entity (if included in the Subject);
  3. An organizational unit of the Legal Entity (if included in the Subject);
  4. An address of the Legal Entity (if included in the Subject);
  5. Jurisdiction of Incorporation or Registration of the Legal Entity; and
  6. Unique identifier and type of identifier for the Legal Entity.

Sectigo have provided an infosheet on how validation is determined by their validation team.

Q: Where can I find maintenance and status information for the service?

...

It is currently possible to order Document Signing Certificates on a preconfigured USB token from Sectigo.  More information on this process is available in this GUIDE.

Q: Are eIDAs Certificates available via Sectigo?

eIDAS certificates These can be ordered viahere: https://www.sectigo.com/ssl-certificates-tls/eidasdocument-signing-certificates-for-citizens. There is a charge for these certificates. .  Participants can use the following discount code which will only charge you for the token and not the certificate itself: QQY1XB49V9. 

Q: Are eIDAs Certificates available via Sectigo?

eIDAS certificates can be ordered via: https://sectigo.com/ssl-certificates-tls/eidas-signing-certificates-for-citizens. There is a charge for these certificates.

Q: Q: How Do I Order OV Code Signing Certificates?

OV Code Signing Certificates can be ordered directly from cert manager.  From  From 8th May 2023 it will only be possible to order code signing certificates that comply with specific HSM standards OR that are supplied directly on a token by Sectigo.  More information is available here: https://sectigo.com/knowledge-base/detail/Changes-to-Sectigo-Code-Signing-Offerings/kA03l000000BoIs.  Currently supported devices are:

...

More information about using your own Yubikey to order a certificate can be found at: https://www.sectigo.com/knowledge-base/detail/Key-Generation-and-Attestation-with-YubiKey/kA03l000000roEV.

To order an OV Code Signing certificate on a device configured by Sectigo please order at https://www.sectigo.com/ssl-certificates-tls/code-signing and use discount code 2GE8AFN0T1. 

To order an OV Code Signing certificate on your own device, please order via Cert Manager. 

Q: How Do I Order EV Code Signing Certificates?

Similarly to document signing certificates, EV Code Signing Certificates need to be provided on a preconfigured USB token from Sectigo.  More information on this process is available in this GUIDE.to be provided on a preconfigured USB token from Sectigo.  These can be ordered here: https://www.sectigo.com/ssl-certificates-tls/code-signing using discount code: 3GE5YPN6T8. 

Q: How do I create an EV Anchor?

...

Yes, due to slight differences in the industry requirements the set of 'authentic information sources' that Sectigo has to use for organisation validation is different. Whereas for SSL validation an independent information source may be used, for S/MIME only government agency sources and Legal Entity Identifier (LEI) data references are allowed. This means Sectigo has to do re-validation. This is not triggered automatically - it needs to be requested by an MRAO.  We strongly recommend that you DO NOT SELECT TO REVALIDATE AN ORGANISATION as this will block the ability to issue SSL certificates as well.  Instead, choose to edit an organisation and enter an organisational identifier in the new relevant field...this is typically a VAT number or equivalent.  If you do not have this, enter FIXME in the field and the validation team will attempt to find the correct number.

Q: is GÉANT looking at the impact of the changing / volatile certificate market?

Yes, we have prepared a briefing paper for NRENs and will be undertaking a series of information gathering and discussion workshops in 2024.