Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.

titleEnd of Life for 2-year Certificates

Due to new restrictions put in place by leading browsers, InCommon certificates will have a maximum lifetime of one year starting August 19, 2020. Two-year certificates created before that date will continue to be valid for their full lifetime. This change affects all publicly trusted CAs. The UWCA is not a publicly trusted CA and continues to issue three year certificates. Read more at End of Life for 2-year Certificates.



UW Certificate Services enables self-service support for registered UW DNS contacts requests by registered owners of DNS names to obtain X.509 certificates from the UW Services CA and InCommon CA.

Authorized individuals can log in to Registered owners of DNS names can manage their certificates via the UW Certificate Services website at


UW Services CA


  • UW Certificate Services brokers certificate requests to the UW Services CA.
  • Supports server certificates for UW websites and web services.
  • Supports client certificates for UW applications for TLS client authentication.
  • UW Services CA is not trusted by default by browsers and operating systems.
  • To avoid browser warnings, end users must install the UW Services CA root certificate.



InCommon CA


  • UW Certificate Services brokers certificate requests to the InCommon CA.
  • The InCommon CA is rooted in a CA certificate trusted by browsers and OSes.
  • End users don't need to install any additional root certificates.
  • Server admins will need to install the InCommon intermediate certificate.


Authorization is based on registered contact information for DNS names managed in UW DNS, and based on UW group memberships for DNS names managed outside of UW DNS.

InCommon CA or UW CA?  

In general, use InCommon CA if the certificate is for website SSL, and UW CA if the certificate is for authenticating to a UW web service (e.g. student web service or person web service).  For more information see CA comparison.

Include Page
CA Comparison
CA Comparison

See Also