Useful Software and Websites
• Origo Root CA certificate
If, once you have collected your Unipass certificate, you decide to have a look at its details directly in the certificate store on your computer, you may see a warning message something like: ‘Windows does not have enough information to verify this certificate.’
This message does not mean there is a problem with your Unipass certificate, and you should find that you are able to use it as normal at all the websites which support Unipass certificate. However, if you want to ensure that your computer has the information necessary to verify your Unipass certificate locally, then you should install the Origo Root CA certificate.
The Origo Root CA - G3 certificate may be downloaded and installed from here :- Download certificate
• Origo Root CA Certificate Thumbprint
The thumbprint of the Origo Root CA – G3 is:
0D55 8549 F41B 4B53 05FC B45D DA14 D062 5796 3F5A
This thumbprint number can be checked against that of the Origo Root CA certificate that you have received. The two thumbprint numbers should match exactly before you trust the Origo Root CA certificate.
• Certificate Revocation Status Service (CRSS)
The status of Unipass certificates can be determined by relying parties via the Unipass CRSS, using either a Certificate Revocation List (CRL), or Online Certificate Status Protocol (OCSP). Access to the CRSS services is restricted by OSIS to authorised organisations only.
Online Certificate Status Protocol (OCSP)
OCSP provides "real-time" certificate status information, without the time lag inherent when using a CRL. The Unipass OCSP Responder can be found at the following location: http://unipass-ocsp.trustwise.com
Certificate Revocation List (CRL)
The CRL is a list of revoked Unipass® certificates which have not yet reached their expiry date. The list is updated and published hourly in three formats at the following location:
G3 CRL
X.509 Format
http://onsitecrl.trustwise.com/OrigoSecureInternetServicesLtdOrigoRootCAG3/LatestCRL.crl
PKCS#7 Format
http://onsitecrl.trustwise.com/OrigoSecureInternetServicesLtdOrigoRootCAG3/LatestCRL
LDIF Format
http://onsitecrl.trustwise.com/OrigoSecureInternetServicesLtdOrigoRootCAG3/LatestCRL.ldif
Windows 2000 and Windows XP users who do not have permission to install software on their computers, and also "Thin Client" users (e.g. Microsoft Terminal Services and Citrix users) will need to download the OnSiteMSI file and have it installed on their computer by an IT Administrator before they can collect a Unipass certificate for the first time. This file replaces the software downloads that are normally required during the Unipass certificate collection and renewal processes.
Documents
