Certificate Authorities
Server Configuration
The following are the Certificate Authorities registered with the Austin Active Directory and the assocated test domains
| Server | CA Name | Hash | Status | Purpose | Public Server | Notes |
|---|---|---|---|---|---|---|
| ca-ext-p01 | Austin External 2015 | SHA256 | Production | External SHA2 certificates | certificates.austin.utexas.edu | |
| ca-root-p01 | Austin CA 2016 Prod | SHA256 | Production | SHA2 certificates for prod | certificates.austin.utexas.edu | |
| ca-root-q01 | Austin CA 2016 Qual | SHA256 | Test | SHA2 certificates for qual | certificates.cds.utexas.edu | |
| ca-root-t01 | Austin CA 2016 Test | SHA256 | Test | SHA2 certificates for test | certificates.adtest.utexas.edu | |
| ca02 | austin.utexas.edu External Certificate Authority | SHA1 | Expired | External certificates | certificates.austin.utexas.edu | |
| ca03 | Austin Root Certificate Authority | SHA1 | Production | Root certificate only | certificates.austin.utexas.edu | |
| ca04 | Austin Subordinate Certificate Authority | SHA1 | Production | Issuer for normal certificates | certificates.austin.utexas.edu | |
| ca05 | Austin Disk Certificate Authority | SHA1 | Production | Issuer for disk IPsec certificates | certificates.austin.utexas.edu | |
| ca06 | Austin External Certificate Authority | SHA1 | Production | External certificates | certificates.austin.utexas.edu |
Assigned Certificate Templates
| Server | Certificate Templates |
|---|---|
| ca-root-p01 | |
| ca-root-q01 | |
| ca-root-t01 |
Naming Conventions
Current (as of 2016)
Austin CAs should confirm to the following naming conventions:
Austin CA <year> <function> (<version>)
- The function should be set to Prod, Qual, Test, External, Disk
- The version should be populated when a new CA is required with the same year and function as an existing CA
- Examples:
- Austin CA 2016 Prod
- Austin CA 2016 External
- Austin CA 2016 Disk
- Austin CA 2016 Test
- Austin CA 2016 Qual
- Austin CA 2016 Qual v2