Chapter 3. CA: Handling Certificate Requests
44
2. Insert in a URL that the requester can use to access the issued certificate. This has the following
form:
https://
hostname:port
/ca/ee/ca/displayBySerial?serialNumber=
serial_number
When the requester follows that link, he only has to click the
Import
button to import the certificate
into a browser.
Alternatively, from the agent services window where the new certificate is displayed, copy only the
base-64 encoded certificate, including the marker lines
-----BEGIN CERTIFICATE-----
and
-----END CERTIFICATE-----
. Paste the base-64 encoded certificate into the email message
body, and send the message.
To deliver a new client certificate to the requester, note the serial number of the approved request,
and email the number to them. End users can search for and retrieve certificates based on their serial
number. If it seems helpful, then include instructions on how to retrieve certificates in the email:
1. Open the end users services page.
http://server.example.com:9180/ca/ee/ca
2. Click the
Retrieval
tab. The
List Certificates
form should appear.
3. Enter the serial number of the certificate in both serial number fields.
4. Click
Find
.
5. When the
Search Results
form appears, click
Details
.
6. When the certificate appears, scroll down to the bottom of the form, and click
Import Certificate
.
