ISIS 5 uses a certificate issued by GeoTust/Equifax. The Equifax CA is relatively new, and may not be recognized by some web servers/OS versions, especially older Apache/Tomcat servers.

If you are encountering certificate trust problems when making a SOAP call to the ISIS 5 server, please follow the instruction below to download and import the correct Equifax Root CA certificate.

NOTE: Overtime, GeoTust has issued certificates to us from a couple of different CAs. Even if you had previously imported root CA certificates for ISIS, please double check the information below to confirm you have the correct CA for the proper ISIS instance:

Download and Import Instruction

Equifax CA Certificate Information

The following is the Root CA information for the certificate issued to production ISIS (https://i4w.ais.ucla.edu):

Root 1 – Equifax Secure Certificate Authority
Organization: Equifax Secure Inc.
Country: US
Serial Number: 35:DE:F4:CF
Validity Period: Sat Aug 22, 1998 to Wed Aug 22, 2018 (GMT)
Certificate Fingerprint (MD5): 67:CB:9D:C0:13:24:8A:82:9B:B2:17:1E:D1:1B:EC:D4
Certificate Fingerprint (SHA-1): D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A
Key Length: 1024

And this is the Root CA information for the certificate installed on Test ISIS (https://i4w3.ais.ucla.edu):

Root 5 – Equifax Secure Global eBusiness CA-1
Organization: Equifax Secure Inc.
Country: US
Serial Number: 01
Validity Period: Sat Aug 22, 1998 to Wed Aug 22, 2018 (GMT)
Certificate Fingerprint (MD5): 8F:5D:77:06:27:C4:98:3C:5B:93:78:E7:D7:7D:9B:CC
Certificate Fingerprint (SHA-1): 7e:78:4a:10:1c:82:65:cc:2d:e1:f1:6d:47:b4:40:ca:d9:0a:19:45
Key Length: 1024

You can download and import this root CA certificate here (scroll down to Root 1 and Root 5).

Installation Help

For general installation support, visit Geotrust’s support page. Search for “install root ca”. This will bring up a list of articles dealing with installing a root CA on various servers. A similar guide is available at Starfield Tech (just scroll down the page).

SEASnet Computing Facility has kindly compiled an installation instruction for Apache/PHP/Curl installations.

Here are install details for IIS 6.0 on Server 2003 and older versions of IIS on NT 4.0 (note this page may not display properly in non IE browsers), as well as Microsoft Exchange Server”.

If you have any other questions, please contact Albert Wu at albertwu@ucla.edu