Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: update Fingerprints of new CA chain certificates

...

  1. Click the links to import the Certificates
    • Click here to import the Deutsche Telekom Root CA 2
    • Click here to import the DFN-Verein PCA Global - G01
    • Click here to import the Jacobs University CA - G01
      You have been asked to trust a new Certificate Authority (CA).

      Code Block
      Do you want to trust "Deutsche Telekom Root CA 2" for the following purposes?
      
      [ ] Trust this CA to identify web sites.
      [ ] Trust this CA to identify email users.
      [ ] Trust this CA to identify software developers.
      
      Before trusting this CA for any purpose, you should examine its certificate
      and its policy and procedures (if available).
      
  2. You should click on VIEW to check the certificate. Most important is that you check the fingerprints of the certificate. They should match the following:

    Code Block
    titleDeutsche Telekom Root CA 2
    SHA1 Fingerprint = 85:A4:08:C0:9C:19:3E:5D:51:58:7D:CD:D6:13:30:FD:8C:DE:37:BF
    MD5 Fingerprint = 74:01:4A:91:B1:08:C4:58:CE:47:CD:F0:DD:11:53:08
    
    Code Block
    titleDFN-Verein PCA Global - G01
    SHA1 Fingerprint = F0F4:28C5:8F38:DAC3:C6BB:3A99:F74F:9A13:31F8:9AFD:E9C2:7240:F3B6:9579:09A6:0E4B:A319:EF34:E9A1:45B5
    MD5 Fingerprint = CA5F:5AF5:00C8:CFF2:7820:D137:4B8F:A7F8:E18C:7FD0:DE21:59AA:67B3:710D:3A95:BCC4
    
    Code Block
    titleJacobs University CA - G01
    SHA1 Fingerprint = A1DC:AE03:0171:49A5:4A4B:0EF8:1F56:68A6:0841:E162:8BE2:4F:57:0608:F40A:1375:DEC0:B1B4:F03B:B1A3:7C
    MD5 Fingerprint = 956D:34A2:6981:8CDE:E120:0225:2EAF:1871:0874:B9A5:6F0C:B051:1D21:B2EC:6693:62D1
    
  3. Close the Certificate Viewer and tick all options.
  4. Press OK and that's it.

...

  1. Click the links to download the certificates
    • Click here to import the Deutsche Telekom Root CA 2
    • Click here to import the DFN-Verein PCA Global - G01
    • Click here to import the Jacobs University CA - G01
  2. Doubleclick on one of the downloaded certificate files. The Keychain Access application will be launched
  3. To check the certificate, click on the 'View Certificates' button on the left side of the dialog. A dialog with information about the certificate will pop up. Make sure the following values match:

    Code Block
    titleDeutsche Telekom Root CA 2
    SHA1 Fingerprint = 85:A4:08:C0:9C:19:3E:5D:51:58:7D:CD:D6:13:30:FD:8C:DE:37:BF
    MD5 Fingerprint = 74:01:4A:91:B1:08:C4:58:CE:47:CD:F0:DD:11:53:08
    
    Code Block
    titleDFN-Verein PCA Global - G01
    SHA1 Fingerprint = F0F4:28C5:8F38:DAC3:C6BB:3A99:F74F:9A13:31F8:9AFD:E9C2:7240:F3B6:9579:09A6:0E4B:A319:EF34:E9A1:45B5
    MD5 Fingerprint = CA5F:5AF5:00C8:CFF2:7820:D137:4B8F:A7F8:E18C:7FD0:DE21:59AA:67B3:710D:3A95:BCC4
    
    Code Block
    titleJacobs University CA - G01
    SHA1 Fingerprint = A1DC:AE03:0171:49A5:4A4B:0EF8:1F56:68A6:0841:E162:8BE2:4F:57:0608:F40A:1375:DEC0:B1B4:F03B:B1A3:7C
    MD5 Fingerprint = 956D:34A2:6981:8CDE:E120:0225:2EAF:1871:0874:B9A5:6F0C:B051:1D21:B2EC:6693:62D1
    
  4. Select 'X509Anchors' from the 'Keychain' dropdownlist and press 'OK'.
  5. You will be asked to authenticate yourself. After that, the certificate will be installed system-wide.

...

Some phones strictly require the certificates in another DER format. The Jacobs University certificate is already in that format. Here are the Deutsche Telekom Root certificate and the DFN intermediate certificate certificates in DER Format:

    • Click here to import the Deutsche Telekom Root CA 2 in DER Format
    • Click here to import the DFN-Verein PCA Global - G01 in DER Format
    • Click here to import the Jacobs University CA - G01 in DER Format

...