<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 22 Jun 2012, at 19:01, Scott Klawitter wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="font-family: Calibri, sans-serif; font-size: 15px; ">Some federations like the UKfederation ARE NOT ACCEPTING VeriSign CERTIFICATES ANYMORE and recommend using a self-signed cert.</span></span></blockquote></div><div><br></div>Just to clarify: the UK federation does indeed strongly recommend the use of long-lived, self-signed certificates now. However, we will still accept essentially any other certificate if you really need to use them, for example because you have to do so for use with other federations.<div><br></div><div>We no longer have VeriSign as a qualified CA: they changed their roots and intermediates, so that the VeriSign *products* we certified are no longer being issued by them. This means that a VeriSign certificate can still be embedded, but through the slightly more stringent process we use for self-signed certificates rather than the less stringent one we were able to use with qualified CAs.</div><div><div><br></div><div>Hope that helps,<br><div><br><div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="font-size: 12px; "><span class="Apple-tab-span" style="white-space: pre; "> </span>-- Ian<br></div><div><br></div></span></span></div></div></div></div></body></html>