Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Current Certificate Authorities

The current Certificate Authorities

...

Server Configuration

The following are the Certificate Authorities registered with the Austin Active Directory and the assocated test domains

...

are the preferred CA for internal certificates in the respective environments:

Server

Domain

CA Name

DFS Group

Key Length

Hash

Purpose

Public URL

aad-cart-p01

n/a

Austin-CA-Root-2022

n/a

4096

SHA384

offline root CA for all issuing CAs

certificates.austin.utexas.edu

aad-case-p01

austin.utexas.edu

Austin-CA-Prod-2022

AAD-PKI

4096

SHA384

issuing CA for prod

certificates.austin.utexas.edu

aad-case-q01

adqual.utexas.edu

Austin-CA-Qual-2022

AAD-PKI

4096

SHA384

issuing CA for qual

certificates.adqual.utexas.edu

aad-case-t01

adtest.utexas.edu

Austin-CA-Test-2022

AAD-PKI

4096

SHA384

issuing CA for test

certificates.adtest.utexas.edu

Deprecated Certificate Authorities 

The deprecated Certificate Authorities are still active but no longer the preferred CA for the respective environment:

Server

Domain

CA Name

DFS Group

Key Length

Hash

Purpose

Public URL

aad-ca-p01

austin.utexas.edu

Austin-CA-2016-Prod

AUSTIN-PKI

2048

SHA256

Production

SHA2 certificates for prod

certificates.austin.utexas.edu

aad-ca-

root-

q01

adqual.utexas.edu

Austin-CA-

2016

2018-Qual

CDS

ADQUAL-PKI

2048

SHA256

Test

SHA2 certificates for qual

certificates.

cds

adqual.utexas.edu

aad-ca-

root-

t01

adtest.utexas.edu

Austin-CA-2016-Test

ADTEST-PKI

2048

SHA256

Test

SHA2 certificates for test

certificates.adtest.utexas.edu

aad-ca-c01

cds.utexas.edu

Austin-CA-2016-Qual

CDS-PKI

2048

SHA256

SHA2 certificates for legacy qual

certificates.cds.utexas.edu

Retired Certificate Authorities 

The following are the retired Certificate Authorities that are no longer in production useactive and the associated CRLs cannot be accessed by clients.

Server

Domain

CA Name

DFS Group

Key Length

Hash

Status

Purpose

Public

Server

URL

ca-ext-p01

austin.utexas.edu

Austin External 2015

n/a

 

2048

SHA256

Production (deprecated)

External SHA2 certificates

certificates.

self

ca02

austin.utexas.edu

ca02

austin.utexas.edu External Certificate Authority

n/a

 

2048

SHA1

Expired

External certificates

self

ca03

certificates.

austin.utexas.edu

ca03

Austin Root Certificate Authority

n/a

 

2048

SHA1

Production (deprecated)

Root certificate only

self

certificates.

ca04

austin.utexas.edu

ca04

Austin Subordinate Certificate Authority

 

n/a

2048

SHA1

Production (deprecated)

Issuer for normal certificates

self

certificates.

ca05

austin.utexas.edu

ca06

Austin

External

Disk Certificate Authority

n/a

 

2048

SHA1

Production (deprecated)External certificatescertificates.

Issuer for Austin Disk client certificates

self

ca06

austin.utexas.edu

Assigned Certificate Templates

ServerCertificate Templates
ca-root-p01 
ca-root-q01 
ca-root-t01 

Naming Conventions

Current (as of 2016)

Austin

...

External Certificate Authority

n/a

2048

SHA1

External certificates

self