AEGIS CA TLD Change

You are kindly requested to install new CA RPMs as soon as possible, since it contains updated AEGIS CA root certificate, which allows the use of the new TLD for Serbia (.rs), in addition to the old (.yu) TLD which is currently being phased out. After the new CA RPMs are installed, Serbian sites and users will be able yo migrate to .rs TLD smoothly.

The latest RPM version that contains the updated root certificate is 1.28-1, and can be downloaded using this link.

This is an outlined procedure that should be followed by Serbian sites:

• New host certificates should be requested under .rs TLD for all hosts.
• Everything should be prepared for the DNS change, in coordination with AMRES (Serbian NREN).
• Downtime should be scheduled, during which the DNS should be switched from .yu to .rs, and all host certificates should be replaced; the downtime should last long enough so that the new DNS information propagates everywhere.

The individual users may request new user certificates (with .rs in their e-mail address) once both of the following conditions are met:

• New CA RPMS are installed everywhere.
• Institutional e-mail server used by the user is switched from .yu to .rs TLD (This matter is beyond the scope of AEGIS CA, and should be checked by each user individually).

Users should also reinstall the new root certificate in their browser/s.

• Instrictions on importing certificates into browsers are available here.
• Updated root certificatec can be downloaded from here.