CESNET CA




The Current CESNET CA

On June 17 2005, the CESNET CA started a transition to new software/hardware system. New signing key was generated and a corresponding root certificate issued. The certificate expires June 17, 2025. To avoid any possible name collisions, the certificate subject was set to cn=CESNET CA,dc=cesnet-ca,dc=cz.

The Current CESNET CA Root Certificate

The CESNET CA current root certificate can be downloaded in text (PEM) or binary (DER) formats. The certificate fingerprints are:

MD5: 33:29:B7:54:19:BE:35:FF:4B:B1:B6:DF:11:3E:8A:DB

SHA1: B6:D8:8D:9D:CD:72:DF:1B:D6:CB:2E:EF:8E:64:2F:73:21:24:23:95

The Current CESNET CA CRL

The current Certificate Revocation list for the new CESNET CA is published at http://www.cesnet.cz/pki/crl/cn=CESNET%20CA,dc=cesnet-ca,dc=cz.crl.

The Old CESNET CA

The old CESNET CA root certificate expires June 27, 2006. After June 21, 2005, certificates signed by the old root private key are being issued only exceptionally and must expire before the old root certificate expiration. The CRL issuing service will be stopped on the root certificate expiration.

The Old CESNET CA Root Certificate

The old CESNET CA root certificate can be downloaded in text (PEM) or binary (DER) formats. The certificate fingerprints are:

MD5: 7F:93:95:FE:9D:76:F5:98:80:9E:5F:4B:93:1F:A8:51

SHA1: C9:00:88:24:CA:2F:99:BA:C8:CF:FB:8E:06:29:8A:38:FA:AC:AD:75

The Old CESNET CA CRL

The old CESNET CA Certificate revocation list is published at http://www.cesnet.cz/pki/crl/cca.crl.