The Entrust Chain Certificate contains the Entrust Root CA public key and is signed by Entrust Root Certification Authority (CA). Entrust is a Root CA in all major browsers. By installing the Entrust L1A Chain Certificate in your Web server, you create a chain of trust between end users and your Entrust EV SSL Certificate.

You must install both chain certificates in addition to your Entrust EV SSL Certificate to provide maximum browser support to your Web server. Below are general steps. Consult your server's documentation for more detailed information. Select the Entrust Root Chain Certificate in your Web browser. The certificate begins with the line "----BEGIN CERTIFICATE-----" and ends with "-----END CERTIFICATE-----". You must include both these lines.

If you purchase an Entrust Standard SSL Certificate or Entrust Advantage SSL Certificate, you will not need to install the chain certificates on your web server. If you purchased an Entrust EV SSL Certificate you will need to install the Chain certificates on your web server. Extended Validation (EV) SSL Certificates | SSL Certificates | Managed SSL Certificates | UCC Certificates | WAP Certificates

There are two (2) Entrust Chain Certificates: the Entrust EV Root Certificate and Entrust LIA Chain Certificate) Issuer: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority Subject: C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc.

Please see http://www.entrust.net/ssl-technical/browsers/index.cfm for a complete list of web browsers.

Valid payment information (valid Entrust Purchase Order number, valid Credit Card Information or Promo Code) If the Technical Contact works for a subcontracting company (i.e., ISP) Entrust Certificate Services will forward a Consent Form to the Authorization Contact. The Consent Form will also confirm that the Authorizing Contact has read and agreed to the terms of the CPS and Subscription Agreement.

From the time you submit your application, the processing time for an Entrust Certificate takes 3 to 5 business days for North America, and 5 to 10 business days for applications outside of North America.. If the information you provided with your application is not adequate (i.e. your organization does not own the domain name you apply for), the processing time will take longer, or your application will be rejected.

Your Entrust SSL Certificate is provided to the order technical contact in an email when your order is completed. You can also utilize the Customer Order Tracking page by entering your order number and in the Certificate section of the page select the "Click here to retrieve your certificate" link.

Yes, an Entrust SSL Certificate can be revoked. A certificate should be revoked under the following conditions: Entrust will automatically revoke your Entrust SSL Certificate if being replaced by a reissued certificate. If for any reason Entrust needs to revoke your SSL Certificate, you will be notified of the revocation.

Revocation of WAP Certificates is not supported in Version 1.1 of the WTLS Specification as published by the Wireless Application Protocol Forum Ltd.

If you need to revoke your Entrust SSL Certificate, use the following link https://buy.entrust.net/buy/index.cfm?event=revokeForm In the event you lost your passphrase, please contact the Entrust Certificate Services support certserv.support@entrust.com to get a template of a letter to fax us.

The Service must be purchased through an Entrust Sales representative. A minimum quantity of 5 certificates is required. Please contact Sales at:

To ensure that Entrust can process your application for an SSL or WAP Server Certificate efficiently, please make sure that you have the following information: You generate a Certificate Signing Request (CSR). You can find more information concerning Certificate Signing Requests in our CSRs FAQs section. You own your domain name: Entrust will not be able to process your Server Certificate if the domain name is not registered to your company, parent company or subsidiary.

Entrust recommends starting the renewal process 30 days before the expiration of your current Entrust certificate. Your new certificate will be 1 year (or 2 years, depending on your purchase option) from the expiration date of your current Entrust certificate. There is no penalty for renewing early. The renewal verification process usually takes 3 to 5 business days. within North America.

If you are using a web browser which is in our supported list, you do not need to install a chain certificate in your client web browser. New versions of web browser from the same vendor will normally inherit the same trust. Please see http://www.entrust.net/ssl-technical/browsers/index.cfm for a complete list of web browsers.

The Entrust Chain Certificate you are importing tells your Web browser what sites it can trust on the Web. Before you can trust the chain certificate, however, you must be sure that you are importing the correct one. To do this, compare the certificate MD5 Fingerprint (Netscape) or the SHA1 Thumbprint (Internet Explorer) on the certificate you are importing to the one(s) below. Firefox will show both SHA1 and MD5 thumbprints.

The Entrust Certificate Management Service is a self-service administration tool that streamlines the procurement and administration of Web server certificates. Acting as a centrally managed, self-service point-of-purchase, the Entrust Certificate Management Service reduces administrative hassles and lessens the risk of inadvertent certificate expiration by allowing customers to synchronize and control the timing of certificate expiration and "pool" or "re-use" certificates to maximize usage.

You can purchase the Entrust Certificate Management Service with a purchase order (PO) or credit card (Visa, MasterCard, American Express)

When purchasing the Entrust Certificate Management Service, you will be required to accept the terms and conditions of the Service Agreement located at http://www.entrust.com/about/practices.cfm. When your purchase has been processed, you will receive instructions via email on how to enroll for the service. You will be required to provide the following information: your Company's Domain Information, Administrator(s), Authorization Contact, Technical Contact(s), and Billing Contact.

Yes. You will receive email notification from Entrust Certificate Services at approximately 1 month prior to expiry and then again at 2 weeks prior to expiry.

Entrust has created a secure web portal to allow customers to securely access our online services, which includes the Certificate Enrollment Service for Entrust Certificate Management Service. When you register as a client for the service, you will be issued an Entrust Unique ID that you will use to access your Entrust Certificate Management Service. If you already have an Entrust Unique ID, you will be able to use this same ID to access your account.

If your application has been accepted, you can pick up your Entrust Server Certificate by connecting to the URL found in your email notification (sent to the Technical and Authorization Contacts).

The Service must be purchased through an Entrust Sales representative. A minimum quantity of 10 certificates is required.

To renew your service, contact your Entrust Sales Representative at: Phone: 1-888-690-2424 (toll free within North America)

Entrust will notify the Authorizing contact listed on your SSL Certificate order application one month prior to the expiration date of your Entrust SSL Certificate. Entrust will also notify the Technical contact listed on your Entrust SSL Certificate order application two weeks prior to the expiration date of your Entrust SSL Certificate. Instructions on renewing your Entrust SSL Certificate will be contained in this expiry notification email.

Yes, when you renew your Entrust SSL Certificate, you will be required to provide a new certificate signing request (CSR). This is done for security reasons. Unlike other public CAs that simply repackage your old public key in a new certificate and call it a "renewal", Entrust asks that you generate a new key pair and CSR and request a fresh certificate.

Entrust has a certificate replacement / reissue policy that states Entrust Certificate Services can offer a one time, no charge replacement of your certificate within thirty (30) days of the original issue date. If you require a replacement certificate after the initial replacement, or it has been over thirty (30) days since the issuance of your SSL Certificate, you must purchase a new certificate at https://buy.entrust.net/buy/index.

Entrust has a no refund policy on the purchase of any Entrust SSL or WAP certificate(s). This policy is defined in Entrust's Certification Practice Statement located at http://www.entrust.net/about/practices.cfm. If you are within thirty (30) days of the original issue date Entrust, can provide you with one free re-issue.

Your email address is embedded in your Entrust Certificate. As part of the migration to OneNASA Email, your official OneNASA address was added to your certificate by the NASA PKI support staff. If you opted to use an Alias instead of your OneNASA address, your Alias was added to your certificate as well. NOTE: When you login to Entrust the first time after your Certificate was updated, you will receive a message that your Certificate was updated.

Our chains are brass or steel alloy with a 22 kt. antique gold plated finish. Our finish is highly resistant to tarnishing.