Certificate Requests

UB has arranged with Comodo and Verisign to provide certificate signing for Buffalo.EDU and sub-domains.

Comodo signing services pricing varies by type and duration. (All prices subject to change.) The legacy certificates are signed with an older root an are normally not needed unless older mobile devices (e.g. Windows Mobile 5) are clients and those clients are unable to install the current Comodo root.

    Comodo Legacy Certificates
    1 year	 71.40
    2 year	 98.40
    3 year	119.40

    Comodo Legacy Wildcard Certificates
    1 year	278.38
    2 year	528.92
    3 year	751.62
 
    Single Comodo (InstantSSL) certificates
    1 year 	30.38
    2 years	55.18
    3 years	77.50
    4 years	90.00
    5 years    120.00

    Multiple domains (PositiveSSL Multi-Domain Certificate License)
    (minimum purchase 3, single node only):
    1 year, 3 Domains (price is per Domain)       30.00
    1 year, 4 - 100 Domains (price is per Domain) 25.00

    Wildcard (Comodo PremiumSSL Wildcard) domains
    1 year  314.30
    2 years 594.30
    3 years 848.61
    plus $20 per node after the first node.

    Unified Communications Certificate (Subject Alternative Name)
    for Exchange 2007 Server and Office Communications Server 2007.
    $171.00 per year per server, includes three domains.
    $21.00 per domain thereafter.

    

Verisign signing is approximately $330.00 per year per node and may be purchased for one, two or three years.

If this request is not for a CIT Enterprise Infrastructure Services (EIS) machine please contact CIT EIS SSL support at this address: ub-ssl@buffalo.edu to arrange a funds transfer.

You will need to provide:

• the name of a responsible party (not a role or alias) who can answer questions about this request. If there are urgent problems this person will be called at the phone number requested below.
• the phone number of the responsible party
• the e-mail address of the responsible party (or alias) as name@buffalo.edu. Please don't provide sub-domain addresses (e.g. name@acsu.buffalo.edu). The signed certificate will be mailed to this address. This mailing will have the certificate in-line and attached.
• the certificate signing request (CSR) as generated by your web server or associated software (e.g. openssl)
• the host name
• the number of concurrently active nodes if this host is a cluster or otherwise not a single computer (this does not include mutiple cpus running a single kernel)
• the specific server type (e.g. Apache with modssl, Apache with BEN, IIS v6 etc.)

Click HERE when you're ready to submit the required information to CIT Enterprise Infrastructure Services.

IMPORTANT POINTS

• Unless otherwise requested certificates are signed by Comodo.
• Even if you're renewing a non-IIS server you may have to generate a new cert signing request. ub-ssl@buffalo.edu will advise you of the specific details.
• For Verisign issued certificates the Organization (O) field is limited to 64 characters and MUST be ``SUNY AT BUFFALO'' in all capital letters. (See below for other field size limits.) For Comodo issued certificates there are no specific restrictions but the shortened official name for UB is ``University at Buffalo'' which will appear in the certificate as a comment.
• If given a choice you should generate a 1024 bit (or larger) public key rather than a 512 bit key.
• A Verisign certificate can be replaced free of charge within 30 days of issuance.
• IIS version 5 or newer users:
  If you have trouble generating a new request or a renewal request with a certificate currently installed see:
  Microsoft Knowledge Base Article - 295281
  This link may work: MSKB - 295281 if it doesn't work search the knowledge base for:
  How To Renew or Create New Certificate Signing Request While Another Certificate Is Currently Installed.

The location fields are not required to be Buffalo, New York and US but there is no advantage to setting them to alternate values.