Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 45 Next »

Due to new restrictions put in place by leading browsers, InCommon certificates will have a maximum lifetime of one year starting August 19, 2020. Two-year certificates created before that date will continue to be valid for their full lifetime. This change affects all publicly trusted CAs. The UWCA is not a publicly trusted CA and continues to issue three year certificates.


UW Certificate Services enables self-service requests by registered owners of DNS names to obtain X.509 certificates from the UW Services CA and InCommon CA.

Registered owners of DNS names can manage their certificates via the UW Certificate Services website at

Authorization is based on registered contact information for DNS names managed in UW DNS, and based on UW group memberships for DNS names managed outside of UW DNS.

InCommon CA or UW CA?  

In general, use InCommon CA if the certificate is for website SSL, and UW CA if the certificate is for authenticating to a UW web service (e.g. student web service or person web service).  For more information see CA comparison.

InCommon CA

Recommended for:

  • Server certificates for website SSL


  • InCommon CA is rooted in a commercial CA certificate trusted by browsers and OSes.
  • Accepts certificate requests via the UW Certificate Services website.
  • Supports server certificates for UW websites and other services.
  • Supports unlimited server certificates for all UW-owned domains approved by InCommon.
  • Wildcard certificates available to registered owners of approved domains.
  • Certificates issued at no additional cost to UW departments; part of the basic services bundle.
  • End users don't need to install any additional root certificates.
  • Server admins must install the InCommon CA intermediate certificate.
  • Not trusted by most UW Web Services for client authentication.


UW Services CA

Recommended for:

  • Client certificates for interaction with UW Web Services



See Also

  • No labels