Current certificate chains: History of changes

The update includes:

Adding a chain of certificates and settings of QTSP of the Foreign Intelligence Service of Ukraine.

To operate with the QTSP of the Foreign Intelligence Service of Ukraine, it is necessary to provide access to the services of this QTSP under the DNS-Name ca.szru.gov.ua. For this you need:

• when using inter-network screens (firewalls), allow connection from the internal network to the outside for the DNS name ca.szru.gov.ua for HTTP and HTTPS protocols (to TCP port numbers 80 and 443);
• when using JavaScript libraries and server proxy handlers (ProxyHandler) for them - add the DNS Name ca.szru.gov.ua to the list of allowed network nodes (knownHosts) in the ProxyHandler handlers.

The update includes:

• a new (updated) chain of certificates of QTSP of CA JSC CB "PRIVATBANK".

The update includes:

• updated certificates of the CMP server of QTSP "eSign" of LLC "Ilife".

The update includes:

• adding a chain of certificates and settings of KNEDP SBU;
• a new (updated) chain of KNEDP CSK JSC "Oschadbank" certificates.

To work with the KNEDP of the SBU, it is necessary to provide access to the services of this KNEDP under the DNS-Name va1-knedp.ssu.gov.ua. For this you need:

• when using inter-network screens (firewalls), allow connection from the internal network to the outside for the DNS name va1-knedp.ssu.gov.ua for HTTP and HTTPS protocols (to TCP port numbers 80 and 443);
• when using JavaScript libraries and server proxy handlers (ProxyHandler) for them - add the DNS name va1-knedp.ssu.gov.ua to the list of allowed network nodes (knownHosts) in the ProxyHandler handlers.