What are you looking for?

Improved accessibility mode

SURF strives for a website that is accessible to everyone. We are working on a full accessibility mode.

SURFcertificates

Encrypted connections to your web servers

Apply for digital certificates at low cost. Certificates are important for good IT security at your institution: they ensure the encryption of information exchange and can provide emails, documents or software with a digital signature. You can also use them for authentication.
Apply for SURFcertificates
Student achter laptop in bibliotheek vanaf verhoging met koptelefoon

Advantages

Cheaper certificates

Through SURFcertificates, you make unlimited use of different types of certificates for a fixed, low monthly fee.

One supplier for all certificates

Besides 'normal' TLS/SSL certificates, we offer code-signing and person certificates for authentication, e-mail and document signing. There are also IGTF/grid certificates for specific research applications.

Automation options and support

You can request all types of server certificates via the ACME protocol. SURF can provide support for the transition to certificates with a short validity period.

Do you have a question about SURFcertificates? Get in touch.

Joost Gadellaa

Joost Gadellaa

certificaten-beheer@surf.nl

About SURFcertificates: IT security tool

A certificate ensures the encryption of communication between systems and provides authentication. With SURFcertificates, you can make large-scale use of certificates at relatively low cost, including:

  • TLS/SSL server certificates
  • Personal (S/MIME) certificates for all employees
  • Grid (IGTF) certificates for e-science environments
  • Code-signing certificates
  • Document-signing certificates

For a fixed monthly fee, an institution can request unlimited server, client, and authentication certificates with basic or organisation validation (OV). All other certificates from the provider, or those with extended validation (EV), can be obtained at a discount. There are also options for Qualified eSignatures and eSeals that comply with the requirements of the EU Regulation 910/2014 (also known as eIDAS).

Certificates from a trusted party with SURF support

To deliver the service, we work with a Certificate Authority (CA) that is part of the PKI ecosystem and included in all common root stores. SURF manages the environment within which each institution has its own sub-environment. In addition to access to a portal for requesting certificates, SURF provides support and advice to institutional administrators for all their questions about certificates, certificate management, and compliance with modern internet standards related to cryptographic signing and encryption.

Issuing certificates via portal and via ACME

Certificates can be issued through a web interface for end users or administrators, but also via the ACME protocol. With this kind of automation, the management burden around certificate usage is reduced. For questions, you can directly contact SURF administrators. We are happy to think along with you about automation or specific applications.

Who is SURFcertificates intended for?

You use this service as an administrator of web servers or as an IT security officer. You can easily apply for SURFcertificates online via My SURF. You can use SURFcertificates if your institution is affiliated to SURF.

More information?

Visit the SURFcertificates wiki with all the information about SURFcertificates' services.
Go to the wiki

More about SURFcertificates