...

Currently (2020-04-08), if you use the GÉANT OV SSL type and request a certificate for mail.test.example.org, you will get that name put in a DNS Subject Alternative Name, but you will also get a DNS Subject Alternative Name for www.mail.test.example.org . We recommend that you use GÉANT OV Multi-Domain instead if you do not want this, as no extra www-prepended name is added for that type. This has been reported to GÉANT.

EV Certificates

We hope to be able to provide you with tested, working instructions on how to order EV certificates after the summer of 2020As of the autumn of 2021, SUNET TCS recommends that you do not use EV certificates. The benefits are limited and the procedure for requesting them is more complicated and prone to complications than for OV certificates.

Please do not order EV certificates or EV anchor certificates without talking to tcs@sunet.se first, as the procedure will not be to just to request an individual EV certificate, and you may be locked out of ordering normal OV certificates while EV validation takes place. Also, we would very much like to work with you to document the process, so we can check it against instructions from Sectigo.

IGTF (Grid) Certificates

We are waiting for the grid certificate profiles to be correct before advising you about If you are not currently using IGTF (grid) certificates, talk to tcs@sunet.se first before starting to request them.

Allowing non-admins to request certificates

...