Request user certificates using GnuTLS

This procedure is intended for experienced administrators and tech-savvy users. The SCC-Servicedesk cannot provide support for this method.

This process enables users to request multiple email addresses for a single certificate.

This method requires certtool from the GnuTLS library. Most linux distributions provide a matching package (usually named gnutls-utils or gnutls-bin). Windows users are advised to use cygwin, MSYS2 or the Windows Subsystem for Windows (Windows 10 and newer).

The request works like the gnutls server process, Enter your properly formatted name in the Hostname hier eintragen field on top. Don't forget the proper prefix for group or pseudonym certificates (“GRP: ” and “PN: ”). Remove the comment in front of the email= attribute. Add as many additional email= attributes as needed. Generate the request using certtool.

Upload the request file in the CSR (PKCS#10) upload subsection.

Select the User profile under Certificate profile. Choose Code Signing instead if you need that. All other profiles starting with User are subsets of the User profile and we don't recommend using them unless you absolutely know hat you are doing: