...
HARICA certificates issued by the GÉANT Certificate Service
Testing-one-two HARICA is the CA backing the GÉANT Certificate Service Service since January 2025. The server certificate issued by the service comes with the GEANT intermediate certificate as well as with the Cross Certificate from HARICA Root CA 2015 to 2021 as a second intermediate certificate. This way, trust can be build between the supplicant and the RADIUS server using either the HARICA TLS Root CA 2021 or the HARICA Root CA 2015 (or both). It is recommended to put only the HARICA Root CA 2015 to eduroam CAT for usage during onboarding, since you may experience problems with Windows clients if you would utilise the HARICA TLS Root CA 2021 (although it gives a shorter chain). Adding both roots will result in Passpoint not working on Android.
...