NERSC Online Certificate Authority

The NERSC Online Certificate Authority (CA) issues short-lived grid certificates (valid up to 1 million seconds, or approximately 11 days) to NERSC users, based on an LDAP authenticated "myproxy-logon" client request. The NERSC Online CA is operated under the Short Lived Credential Service (SLCS) profile of the International Grid trust Federation (IGTF).

CA Information

• NERSC Online CA CP/CPS [ DOC | PDF ]
• NERSC Online CA Signing Certificate [ PEM | DER ]
• NERSC Online CA Certificate Revocation List (CRL) [ PEM | DER ] (Updated: )
• CRL URL file
• Signing Policy file


• CA Files [ gzipped tarball ]


• ESnet root CA documents

Getting a Certificate:

NERSC Online CA issues certificates to clients that use the myproxy protocol. The NERSC Online CA is located at nerscca.nersc.gov (also known as slcs.nersc.gov).

To acquire a certificate you must have a valid NERSC account. You can get a certificate by issuing the following command:

myproxy-logon -s nerscca.nersc.gov

You will need to enter your NERSC NIM/LDAP password to authenticate your identity. If the authentication succeeds the myproxy client will create a short lived certificate for use on the grid.

For more information visit: http://www.nersc.gov/nusers/services/Grid/certificates.php

NERSC Contact Information:

http://www.nersc.gov/about/contact.php

For any issues relating to the NERSC Online CA, please send email to certs AT nersc.gov

For urgent requests, please contact NERSC Account Support at 1-800-66-NERSC