Load Root-Certificate / Revocation List (PKI for Fraunhofer Contacts)

In order to establish secure e-mail communications, both external partners and Fraunhofer employees must possess a personal digital certificate. These certificates are issued by different certification authorities (CAs), which also hold a certificate of their own. For smooth communication it is necessary that both the communicating partners have available the respective certificate of his/her partner and also that they trust the corresponding CA certificates. Therefore it is required to import these so-called CA root certificates in your e-mail application.

On this page you may download the root certificate of the PKI for Fraunhofer Contacts. Please follow this link for downloading the required root certificate of the Fraunhofer PKI.

For further assistance regarding the integration of the root certificate within your e-mail application please refer to our detailed user guide.

Note: On XX.09.2022, the Fraunhofer CC-PKI issued a new root certificate with a larger key length (4096 bit) for the PKI for Fraunhofer Contacts. The previously issued personal certificates remain valid until the expiry of the certificate and can be resolved or checked via the distribution points listed below (Old Root Certificate / Old Certificate Revocation List). Until the old root certificate expires, it is necessary to trust both the old and the new root certificate of the PKI for Fraunhofer Contacts. I.e., both certificates must be imported into the root certificate store of the e-mail application used.

New Root-Certificate / Revocation List for the PKI for Fraunhofer Contacts (4096 bit)

Download root certificate Certification authority for Fraunhofer Contacts

Download certificate revocation list Certification authority for Fraunhofer Contacts

Control data for the new root certificate of the CA for Fraunhofer Contacts:

• Distinguished Name: CN = Fraunhofer Contacts Root CA 2011, OU = PKI for Fraunhofer Contacts, O = Fraunhofer, C = de
• Certificate issuer: identical, since self-signed root certificate
• Certificate valid period: 31.08.2022 - 31.08.2028
• Certificate key length: 4096 Bit
• Fingerprint (SHA-1): 65:97:61:4E:5D:21:36:97:79:09:76:5E:23:B7:6E:5F:93:E2:5E:DF
• Fingerprint (SHA-256): B2:D3:5A:93:FA:6E:BB:67:4E:DB:19:79:12:57:A8:B7:56:9A:E0:61:6F:33:87:F7:54:F3:51:95:4B:23:93:CD

Old (still valid) Root-Certificate / Revocation List for the PKI for Fraunhofer Contacts (2048 bit)

Download old root certificate Certification authority for Fraunhofer Contacts

Download old certificate revocation list Certification authority for Fraunhofer Contacts

Control data for the old root certificate of the CA for Fraunhofer Contacts:

• Distinguished Name: CN = Fraunhofer Contacts Root CA 2011, OU = PKI for Fraunhofer Contacts, O = Fraunhofer, C = de
• Certificate issuer: identical, since self-signed root certificate
• Certificate valid period: 28.02.2011 - 07.10.2025
• Certificate key length: 2048 Bit
• Fingerprint (SHA-1): 8C:D2:B3:3E:FC:E2:0E:A3:74:DF:04:61:31:EB:58:DD:F8:0E:84:9D
• Fingerprint (SHA-256): A9:92:7C:09:51:92:E5:E3:F3:89:71:A9:84:64:84:31:62:3C:B8:E4:D7:0C:AD:D5:60:28:A1:15:91:34:3F:4A