TRIUMF Certificate Authority

Policy

• Legitimate TRIUMF services (websites, mailservers etc.) in the triumf.ca domain.
• Legitimate TRIUMF software developers, who wish to sign e.g. Java applets
• Legitimate TRIUMF personnel, who wish to sign documents (e.g. Adobe PDF)

Certificates may be signed by the Certificate Manager or by an authorized member of TRIUMF Computing Services.

Best efforts will be made to keep the CA key physically and electronically secure

A reference copy of the CA certificate is held on this machine, whose identity is certified by a commercial CA (whch is trusted by the browser vendors, as per this explanation)