From 4f4fd7e9691283ad9f7337eeaf3a48f730f45899 Mon Sep 17 00:00:00 2001
From: Konrad Bucheli <konrad.bucheli@psi.ch>
Date: Tue, 8 Mar 2022 13:39:10 +0100
Subject: [PATCH] new DigiCert TLS certificate procedure

---
 admin-guide/operations/certificates.rst | 17 +++++------------
 1 file changed, 5 insertions(+), 12 deletions(-)

diff --git a/admin-guide/operations/certificates.rst b/admin-guide/operations/certificates.rst
index d59fa350..123f5d81 100644
--- a/admin-guide/operations/certificates.rst
+++ b/admin-guide/operations/certificates.rst
@@ -1,7 +1,7 @@
 Managing SSL certificates
 =========================
 
-We use QuoVadis certificates from Switch.
+We use DigiCert certificates.
 
 
 Requesting certificates
@@ -12,7 +12,7 @@ and ``$ALIASES``::
 
     cat >$FQDN.cnf <<EOF
     FQDN = $FQDN
-    ORGNAME = Paul-Scherrer-Institut (PSI)
+    ORGNAME = Paul Scherrer Institut (PSI)
 
     # subjectAltName entries: to add DNS aliases to the CSR, delete
     # the '#' character in the ALTNAMES line, and change the subsequent
@@ -43,12 +43,9 @@ and ``$ALIASES``::
     /usr/bin/openssl req -new -config $FQDN.cnf -keyout $FQDN.key -out $FQDN.csr
 
 
-Finally, `submit the CSR <https://www.switch.ch/pki/manage/request/>`_.
+Finally, `submit the CSR <https://www.digicert.com/secure/requests/products?guest_key=11dqrl7540p3t4jm4qhnvsnzjkvk>`_.
 
-This procedure is described in more detail at the `SWITCH website
-<https://www.switch.ch/pki/manage/request/howto/>`_.
-
-SWITCH will send an email including instructions on how to download the
+DigiCert will send an email including instructions on how to download the
 certificate.
 
 
@@ -61,8 +58,4 @@ and submit the CSR as before.
 
 Revoke certificates
 -------------------
-
-When receiving the first mail from SWITCH as described in `Requesting
-certificates`_ one has to create an account to download the certificate. Using
-this account, certificates can be revoked at the `QuoVadis website
-<https://tl.quovadisglobal.com/subscriber/>`_.
+?