IT Certificate Repository

You can find policies here:
University IT Policies

The following internal UIowa CA certs are available:

(SHA2 - For SHA2 based certificates issued in 2016 and later)
Uiowa RSA Root CA certificate [PEM/Base 64]
Uiowa RSA Issuing CA1 certificate [PEM/Base 64]

The following UIowa Certificate Revocation Lists are available:
Uiowa RSA Root CA CRL
Uiowa RSA Issuing CA1 CRL

Incommon CA Certificates

For public facing services, the following Incommon related CA certs are available for trust:

Incommon Organizational Validation SSL/TLS

For TLS certificates issued before May 4th, 2026

Base:
RSA: UserTrust RSA Certification Authority Root [PEM/Base 64] InCommon RSA Server CA certificate v2 [PEM/Base 64] InCommon RSA v2 Org Validation Server CA/Root Bundle [PEM/Base 64]
ECC: UserTrust ECC Certification Authority Root [PEM/Base 64] InCommon ECC Server CA certificate v2 [PEM/Base 64] InCommon ECC v2 Org Validation Server CA/Root Bundle [PEM/Base 64]

For TLS Server Authentication certificates issued after May 4th, 2026; and before July 17th, 2026

Base:	Legacy:
RSA: Sectigo Public Server Authentication Root R46 [PEM/Base 64] InCommon RSA OV SSL CA 3 [PEM/Base 64] InCommon RSA OV SSL CA 3/Root Bundle [PEM/Base 64]	RSA: UserTrust RSA Certification Authority Root [PEM/Base 64] Sectigo Public Server Authentication Root R46 cross-signed by UserTrust [PEM/Base 64] InCommon RSA OV SSL CA 3 [PEM/Base 64] InCommon RSA OV SSL CA 3/Root Bundle [PEM/Base 64]
ECC: Sectigo Public Server Authentication Root E46 [PEM/Base 64] InCommon ECC OV SSL CA 3 [PEM/Base 64] InCommon ECC OV SSL CA 3/Root Bundle [PEM/Base 64]	ECC: UserTrust ECC Certification Authority Root [PEM/Base 64] Sectigo Public Server Authentication Root E46 cross-signed by UserTrust [PEM/Base 64] InCommon ECC OV SSL CA 3 [PEM/Base 64] InCommon ECC OV SSL CA 3/Root Bundle [PEM/Base 64]

For TLS certificates issued after July 17th, 2026

Base:	Legacy:
RSA: emSign Root TLS CA - G1 [PEM/Base 64] InCommon Intermediate CA - OVG2C [PEM/Base 64] InCommon Intermediate CA - OVG2C/Root Bundle [PEM/Base 64]
ECC: emSign Root TLS CA - G3 [PEM/Base 64] InCommon Intermediate CA - OVG3C [PEM/Base 64] InCommon Intermediate CA - OVG3C/Root Bundle [PEM/Base 64]