Standard
Different specifications of standard class C certificates are available. For each specification of the standard class C certificate, there is a policy describing the correct usage and the defined issuance process.
- All Class C – Standard certificates are subject to the Guidelines issued by the Swiss Government PKI, as well as the Terms and Conditions of Use.
- Swiss Government Root CA III (Klasse C)
Creating key pairs and CSR files
PDF302.16 kB13 April 2026
Guidelines der Swiss Government PKI zu den Klasse C Standard Zertifikaten
Erläuterungen zu Ausstellung, Bezug und Einsatz von Klasse C Standard Zertifikaten der Swiss Government PKI
PDF290.20 kB18 January 2018
Quick Guide: Certificate Request Wizard (CRW)
PDF1.02 MB17 July 2024
Quick Guide: Certificate revocation (CMC)
PDF716.85 kB6 March 2025
Quick Guide: Creating an LRA-Officer profile (CMC)
PDF862.46 kB6 March 2025
Request: Authorisation for the issuance of standard class C certificates of the Swiss Government PKI
PDF195.91 kB3 February 2025
Vereinbarungs‐ und Nutzungsbedingungen für den Bezug von Ausstellungsberechtigungen für Klasse C Standard Zertifikate der Swiss Government PKI
PDF160.15 kB20 January 2016
You can find details on placing an order here.
- The following options are available as policies.
- Note: The server authentication (Server Auth) feature is explicitly not included.
Der Certificate Request Wizard (CRW) ist ein eigenständiges Tool, auf Ihrem BAB-Client. Der LRAO Klasse C kann mit dem CRW Certificate Signing Requests (CSRs) lokal signieren. Je nach Zertifikatstyp muss der Zertifikatsempfänger die Angegebenen Daten zuerst verifizieren und bestätigen, bevor das Zertifikat ausgestellt und abgeholt werden kann.
- The certificate is issued by an LRA officer trained by the Swiss Government PKI using the Certificate Request Wizard (CRW). Authorisation to use the application and the relevant policies must be requested in advance.
- The information contained in the certificate cannot be amended retrospectively. If, for example, the name or the subject’s email address changes, the certificate must be revoked and reissued.
- If certificates are only obtained on an ad hoc basis, there is no need to train an LRA officer; instead, applications for certificates can be made directly to the Swiss Government PKI.
- The information contained in the certificate cannot be amended retrospectively. If, for example, the name or the subject’s email address changes, the certificate must be revoked and reissued.
- Prerequisite: Class C LRAOs must sign and accept the Terms and Conditions of Use and the Swiss Government PKI Guidelines in advance
Revocation is carried out either by the LRA officer who issued the certificate, or via Remedy tickets (RoBIT).
It is not possible to renew a Class C certificate. Once the certificate has expired, a new application must be submitted and the certificate reissued.