Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You will need to use: https://acme.harica.gr/TCS-DV/directory and to follow the instructions at: https://guides.harica.gr/docs/Guides/Server-Certificate/ACME-Instructions/.  You will also need the KeyID and HMAC key – please contact your NREN for this information. 

What Type of Certificate Do I Need?

Domain Validation (DV), Organisation Validation (OV) and Extended Validation (EV) certificates were designed to give a different level of confidence in the certificate types because the Certificate Authority carries out more stringent checks on the organisation requesting the certificate at each level.  Browsers used to signal this in the address bar, and the idea was the user could make different decisions based on this security level.  Placing this level of technical knowledge on the user has now been broadly debunked and this information is no longer prominently signalled.

For the same key size and encryption algorithm DV/OV/EV certs are indistinguishable in terms of encryption security.  In most popular browsers, there is now no easily visible difference between these certificate types unless the user looks deep into the certificate settings.  The increased levels of validation requirements also make automation harder, and with changes to certificate validity periods once more being discussed by the CA/B Forum, automation should now be considered essential by all organisations. 

For the majority of use cases, DV certificates should serve your purposes well.  You may find certain implementations or use cases still insist on OV or EV certificates and these can still be obtained via TCS (at an extra cost for EV), but we recommend using DV for most circumstances.