Question 1

What is a certificate?

Accepted Answer

A digital certificate is a secure digital identity that works like an ID card for a website, server, connected device, or person. It proves identity and creates a secure, encrypted connection between two parties – for example, between your browser and a website. These are called public certificates.

Depending on the certificate type, the identity may verify only domain control or also confirm the organization behind the service.

Certificates also exist for internal systems, servers, and connected devices. These are called private certificates because of their purpose and use – they're typically used within a company or organization and don't need to be known by outside parties.

Think of it this way:

Physical ID card → shows who you are
Digital certificate online → shows what a website or server is

When a website has a certificate, your browser can:

Verify the site is authentic – not fake or hijacked
Encrypt traffic so no one can read or manipulate information in transit
Display the padlock in the address bar as a sign of a secure connection

Certificates are used widely across all types of organizations. Everyone needs them for login, connectivity, infrastructure, and more:

Digital identity and authentication in government and the public sector
Digital identity and authentication in telecommunications
Digital identity and authentication in banking, finance, and real estate
Digital identity and authentication in healthcare
Digital identity and authentication in manufacturing and e-commerce
Digital identity and authentication for universities
Erasmus digital identity

Question 2

Where do I go with questions about certificates in Sweden?

Accepted Answer

How you get support depends on your agreement. Whether you have a Telia or Telia Cygate contract, we'll make sure your questions and issues are handled.

Have a Telia agreement?

If your Telia agreement includes a specified support flow for all services, including certificates, use that channel.

Telia Service Desk
Phone: 020 32 32 62
Select option 4, server ID

Have a Telia Cygate agreement or buying individual certificates?

You'll get support through Telia Cygate.

Ticket:https://customerportal.teliacygate.se/ticketEmail:sslsupport@cygate.sePhone: 010 87 88 800

General questions

For general inquiries, contact your Telia or Telia Cygate sales representative, or fill out one of the forms on the website.

Question 3

What's the difference between public and private certificates?

Accepted Answer

There are two main types of digital identities: public and private certificates.

Public certificates are used to secure communication over the internet. They can be verified by anyone through a trusted certificate authority. Think of them like a passport – an identity that's valid and trusted globally.

Private certificates are used internally within an organization, for example between systems or devices. They aren't visible or verifiable outside the organization. They're more like an access card that's only valid within a specific environment.

The key difference is that public certificates are open and global, while private certificates are internal and restricted. Both are often business-critical and can be provided through Telia's certificate factory, which is also used in Telia's own operations.

Question 4

What's the difference between DV and OV certificates?

Accepted Answer

A DV certificate shows that you control a domain.
An OV certificate also confirms that there's a registered company or organization behind the website.

DV certificates are often used for simpler needs. They verify the domain only, not the organization's identity. In some contexts, that's enough. In others, a higher level of trust is required.

OV certificates provide stronger trust because the organization's legal identity is verified before the certificate is issued.

Benefits of OV certificates:

Verified organizational identity
Harder to exploit for phishing and fraud
Support for NIS2 and eIDAS requirements
Signal of credibility and professionalism
Commercial support and reliable delivery

More organizations today choose OV or private certificates as security and trust requirements increase. This reflects the fact that digital identities have become a business-critical part of secure and robust digital infrastructure.

Question 5

What's the difference between TLS and SSL?

Accepted Answer

TLS stands for Transport Layer Security.
SSL stands for Secure Sockets Layer.

In practice, there's no difference in how the certificates are used today. Current certificates are TLS certificates, but they're often still called SSL certificates out of habit.

SSL is the older technology. TLS is the more modern and secure version. The function is the same – encrypted communication between users and websites – but the underlying technology is now TLS.

Question 6

What makes Telia's certificates a Premium option?

Accepted Answer

What makes Telia's certificates a Premium option?

A Premium certificate provides a higher level of identity verification. It's based on organization validation or higher, meaning the company behind the website is thoroughly verified before the certificate is issued.

The company name appears in the certificate, and Telia conducts extensive validation, including verification of corporate records, documentation, and callback confirmation. This establishes a strong and verified digital identity.

Premium includes

Stronger identity verification
The organization's legal identity is verified before issuance.

24/7 support
Access to support around the clock, 365 days a year, in Swedish and English. Assistance with installation, CSR generation, troubleshooting, and reissuance at no extra cost during the validity period.

Fast issuance process
The first certificate typically takes 1 to 3 days as the organization needs to be verified. Once validation is complete, new certificates can be issued within a minute.

High compatibility and extended features
Support for wildcard certificates and broad compatibility with browsers, servers, and systems.

Certificate portal for full control
An administrative portal for managing your entire certificate inventory, regardless of certificate type. You can also import certificates from other providers for a unified overview.

Legal jurisdiction and regulatory framework

Telia is the only Nordic public certificate authority and operates under Swedish and Finnish law.

Many international certificate authorities are subject, in whole or in part, to U.S. legislation such as the Cloud Act, Patriot Act, and FISA. For organizations with strict requirements around data protection, privacy, and regulatory compliance, jurisdiction can be an important factor when choosing a provider.

Choosing a Nordic certificate authority means your certificate service is managed within the EU and under European regulations.

About QWAC

Qualified Website Authentication Certificate is a certificate type defined under the EU eIDAS regulation.

A QWAC legally identifies who operates a website and must be issued by a qualified trust service provider. The certificate combines strong identity verification with encryption and is used in sectors such as banking and payments.

Telia plans to offer QWAC in 2027. More information will be published as the launch approaches.

Question 7

Why doesn't Telia offer packages that include Smart Seal, Domain Reputation Monitoring, and Vulnerability Assessment Scans?

Accepted Answer

Visual seals and trust marks

Terms like Smart Seal, Site Seal, and Trustlogo refer to visual symbols displayed on a website to indicate that it's secure.

Users already see basic security through HTTPS and the padlock icon in their browser. Some certificate authorities offer additional visual badges designed to reinforce trust.

Telia doesn't currently bundle these types of add-ons with certificates, as demand in the Nordic market has been limited. If needed, custom arrangements can be discussed with your Telia or Telia Cygate sales representative.

Domain monitoring and security checks

Services like domain reputation monitoring, blocklist checks, malware scanning, and CT log monitoring provide automated checks of your domain's reputation and security status.

These services are also sometimes offered as certificate add-ons. Telia has chosen not to include them as standard, since many organizations already have equivalent capabilities in their broader security platform.

Vulnerability scanning

Vulnerability assessment involves active scanning of websites and public systems to identify security weaknesses. Results are compiled into a report with recommended actions.

This type of security service is available through Telia Cygate and can be combined with certificate delivery when needed.

Question 8

How long has Telia been a trusted certificate authority?

Accepted Answer

Telia's work with certificates began in 1995, when the first server certificates were delivered. At the time, certificates were shipped on floppy disks, and Telia also produced certificates on smart cards.

In 1999, Telia partnered with VeriSign to deliver public certificates across the Nordic and Baltic regions.

In 2004, Telia took over responsibility for the Swedish postal service's certificate operations and built a specialized PKI organization.

In 2007, Telia established its own CA factory, becoming an international certificate authority with responsibility for its own Root CA and the ability to issue publicly trusted TLS certificates.

Operating as a certificate authority requires compliance with international regulations from the CA/Browser Forum and ETSI, including annual independent audits.

Since 2007, Telia's CA factory has been physically located in Finland, with technical management and customer responsibility shared between Finland and Sweden.

In 2026, a sovereign CA factory will also be established in Sweden under the same Root CA.

Question 9

What is Telia's certificate portal?

Accepted Answer

Telia's certificate portal is a centralized platform for managing both public and private certificates, providing a complete overview of your certificate inventory.

The portal handles all necessary self-administration and certificate reporting. Access is secured with two-factor authentication.

Self-service features include:

Order and issue new certificates in under 1 minute
ACME automation
Add new domains
Add new administrators
Block or revoke existing certificates
Renew and modify existing certificates
Edit CSRs directly in the interface. The CSR is typically created on the server where the certificate will be used and contains information such as domain name, organization details (for OV/EV), country code, and the public key. The CA uses the CSR to create the final certificate.
Renewal function that enables certificate renewal based on the previous certificate without a CSR (same key pair, asymmetric encryption)
Use shared domains for companies within a corporate group with different organization numbers
Invoice reports

You can also import existing certificates from other certificate authorities to consolidate your entire certificate inventory in one place. This is particularly useful during a transition period if you choose Telia's Premium certificates going forward.

Question 10

What types of certificates can Telia issue?

Accepted Answer

Telia issues both public and private certificates.

Public certificates

Telia issues:

OV certificates
SAN certificates
Wildcard certificates
DV certificates for specific needs

These are used to secure services exposed to the internet.

Private certificates and PKI

From the same CA infrastructure, with the same organization and processes, Telia also issues private certificates for internal environments.

Together with Telia Cygate, we can also provide:

Dedicated PKI infrastructure deployed on-premises
PKI as a service, hosted by Telia

Use cases

Certificates are used to establish secure digital identities across many types of environments:

Servers

AD servers, mail servers, system servers, database servers, API gateways, container platforms, load balancers, and firewalls.

Devices

Routers, switches, printers, WiFi access points, client certificates, and Zero Trust devices.

Mobile devices

Mobile healthcare devices, handheld computers, payment terminals, and equipment for contractors and emergency services.

IoT

IoT gateways, sensors, smart meters, smart locks, water meters, industrial cameras, and vehicle devices.

OT and industrial

SCADA systems, PLCs, HMI panels, industrial routers, and servers.

Question 11

What's the pricing and billing model for certificates?

Accepted Answer

Starting March 1, 2026, Telia will discontinue prepaid TLS/SSL certificates. New and renewed certificates will be offered on a pay-per-use basis. Customers will receive a retroactive invoice based solely on actual usage.

Example: If you create a certificate and use it for 20 days, then revoke it before expiration, you'll only be charged for those 20 days on your next invoice.

The pricing model for each certificate type is changing from traditional prepayment to pay-as-you-go billing based on a daily rate. Listed monthly prices represent an annual average. Actual pricing is based on a per-day rate. Invoicing is always retroactive, monthly unless otherwise agreed.

Pay-per-use pricing principles:

Unique dnsSAN names or dnsIP addresses used in active TLS certificates are calculated daily.
Wildcard names, fully qualified domain names (FQDN), and IP addresses have a daily cost equal to the current annual price divided by 365.
The sum of active unique SANs is used for Telia's monthly customer invoicing.
Invoice reports provide details of all unique SANs for verification.

Benefits of pay-per-use pricing:

Only unique SAN names are charged. All copies are free.
Certificates can be modified at any time at no extra cost. You're only billed for days used.
At the end of each period, all daily SAN counts are totaled to generate an invoice.
Revoking a certificate stops billing immediately.
When renewing a previous certificate, remaining days are not lost.

Example: If you create a wildcard certificate on the first day of the year, by year-end it will have generated costs equal to 365 × the daily rate, roughly equivalent to the previous prepaid model. Creating a copy of the wildcard certificate during the year does not affect pricing.

Question 12

What's the difference between ordering individual certificates and using Telia's certificate portal?

Accepted Answer

There are two main ways to order certificates: individual certificates without an agreement, or multiple certificates through a portal with self-service, which requires an agreement.

Individual certificates are designed for organizations that need just a few TLS/SSL certificates – up to 5. To simplify the ordering process, no agreement between Telia and the customer is required before placing an order. These certificates are ordered directly through a web form and are ideal if you only need a few certificates.

Multiple certificates with self-service are for customers who need more certificates and want to manage them through Telia's certificate portal. Using the portal, certificates are issued quickly and can be requested as needed. Portal access is provided through a client certificate, which all administrators receive free of charge.

To become a customer and use the certificate portal for multiple certificates, an agreement between the customer and Telia, or alternatively Telia Cygate, is required before certificate issuance can begin. The agreement is straightforward and includes details such as contract period, service description, division of responsibilities, and issuance policy.

Question 13

Can I modify my order after it's been submitted for processing or after an order has been rejected?

Accepted Answer

You can modify a submitted order until Telia begins processing it. Once the order is received, you'll get a unique URL where you can make changes or adjustments.

If an order is rejected, simply correct any incorrect fields and resubmit the updated order to Telia. There's no need to start over from scratch.

Question 14

Do I need to enter all my company information every time I order a TLS certificate?

Accepted Answer

You only need to provide your organization's name and contact details once. After your first order, the system saves this information – just enter your organization number on future orders to retrieve it automatically.

Question 15

Can I order a TLS certificate with multiple DNS names or as a wildcard certificate (*.domän.se)?

Accepted Answer

Yes, Telia certificates support multiple SAN values and include wildcard certificates.

Question 16

What validity periods apply to certificates?

Accepted Answer

The CA/Browser Forum has decided to reduce the validity period for publicly trusted TLS certificates. Associated domain validation and organization information are also affected.

This change applies globally and covers all certificate authorities. The goal is to improve internet security. Shorter validity periods reduce the risk if a certificate is compromised. At the same time, automation – for example via ACME – becomes increasingly important for managing renewals on time.

In some cases, Telia uses validity periods a few days shorter than the maximum to ensure renewals occur without interruption.

If a system doesn't need to be publicly trusted, private PKI may be an alternative. Private certificates aren't subject to the same global requirements for validity periods and validation, providing greater flexibility for internal environments while maintaining TLS protection.

Telia also offers Managed and Private PKI services where customer PKI can be operated in Telia's audited infrastructure.

Changes to validity periods

Until March 14, 2026:

Certificate validity is 398 days
Domain validation is valid for 398 days
Organization validation is valid for 825 days

Between March 15, 2026 and March 14, 2027:

Certificate validity becomes 200 days
Domain validation is valid for 200 days
Organization validation is valid for 398 days

March 15, 2027 to March 14, 2029:

Certificate validity becomes 100 days
Domain validation is valid for 100 days
Organization validation remains valid for 398 days

From March 15, 2029:

Certificate validity becomes 47 days
Domain validation is valid for 10 days
Organization validation remains valid for 398 days

Question 17

What automations and integrations does Telia offer?

Accepted Answer

Telia CA's ACME service automates the certificate lifecycle. All customers with access to the Telia Certificate Management Portal can use ACME at no additional cost. With proper configuration, server certificates are managed automatically without manual updates. ACME clients that support EAB (External Account Binding) can be used, including Certbot, Lego, and Win-ACME.

Key ACME features:

Access to DV and OV certificates
Use ACME with pre-validated domains in the portal, eliminating the need for HTTP-01 or DNS-01 validation with each request
ACME will support the new persistent validation methods
Access to DNS-01 and HTTP-01 validation methods
From March 2, 2026: Legacy ACME user IDs that create v3 certificates will be automatically updated to create v4 certificates with the new hierarchy

ACME and ARI

Telia CA's ACME supports Account Renewal Information (ARI). With ARI, the ACME server (CA) can suggest renewal windows to ACME clients. This is necessary if new vulnerabilities are discovered and certificates need to be renewed faster than originally planned.

Telia recommends using ACME clients that support ARI.

Question 18

Can I transfer a server certificate to another server?

Accepted Answer

Yes, certificates can be moved to another server as long as the DNS name remains the same and the private key is exportable.

Whether a key can be exported is determined when a new key pair is created, for example on the server.

Question 19

What happens when a public certificate stops working?

Accepted Answer

When a public certificate is invalid or expired, users encounter browser warnings and may be blocked from accessing the service. The site appears insecure or unavailable, quickly eroding trust and damaging your brand.

Encryption may stop working properly, leaving traffic vulnerable to interception or tampering. Critical integrations can also fail, including APIs and payment systems.

Even if an expired certificate still encrypts traffic in some cases, it loses formal trust status under international standards.

Question 20

Which browsers and platforms support Telia Company's CA certificate?

Accepted Answer

Telia TLS/SSL certificates are issued by TeliaSonera Server CA and Telia Domain Validation CA. These are included in the trusted root certificate authority libraries of various platforms as outlined below.

Browser Support for Telia Root CA

TeliaSonera Root CA v1:
Supported by Microsoft Edge, Mozilla Firefox, Google Chrome, and Safari.
Not supported by 360 Secure Browser.

Telia Root CA v2:
Microsoft Edge and Safari receive trust through the operating system.
Mozilla Firefox supported from version 100 onward.
Fully supported by Google Chrome.
Supported by 360 Secure Browser.

Support in Other Software

TeliaSonera Root CA v1:
Supported in Java from version 8 build 171 and version 7 build 181.
Not supported in Adobe AATL for PDF certificates.

Telia Root CA v2:
Supported in Java from version 8 build 171 and version 7 build 181.
Supported in Adobe AATL for PDF certificates.

Operating System Support

TeliaSonera Root CA v1:
Supported in Windows 11, 10, 8, and Windows Server.
Supported in Apple iOS, iPadOS, macOS, tvOS, and watchOS.
Supported in Android.
Supported in Linux.

Telia Root CA v2:
Supported in Windows 11, 10, 8, and Windows Server.
Supported in Apple iOS 17, iPadOS 17, macOS 14, tvOS 17, and watchOS 10.
Supported in Android 14.
Supported in Linux.

Question 21

Why doesn't Edge recognize Telia Server/Domain Validation CA as a trusted root certificate authority?

Accepted Answer

Since Windows XP, Windows checks Microsoft's list of trusted certificate authorities in real time.

Telia Company is part of Microsoft's Trusted Root Certificate Program.

This means that when a user with a modern version of Windows visits a website with a TLS certificate issued by Telia, Windows automatically retrieves Telia's root certificate from Microsoft. This happens without triggering any security warnings for the user.

Below is Microsoft's description of how the process works.

Any new roots accepted by Microsoft are available to Windows XP clients through Windows Update. When a user visits a secure Web site (that is, by using HTTPS), reads a secure e-mail (that is, S/MIME), or downloads an ActiveX control that uses a new root certificate, the Windows XP certificate chain verification software checks the appropriate Windows Update location and downloads the necessary root certificate. To the user, the experience is seamless. The user does not see any security dialog boxes or warnings. The download happens automatically, behind the scenes.

Question 22

Why doesn't Telia Company issue server certificates for internal names and internal IP addresses?

Accepted Answer

The CA/Browser Forum Baseline Requirements prohibit the issuance of certificates with internal names or IP addresses. This change to the regulations was introduced because an attacker could potentially apply for a certificate using an internal name or internal IP address.

The attacker could then install the certificate on a compromised server within an organization that uses the same internal name or address. This would make the services appear legitimate to users, giving the attacker an opportunity to capture usernames and passwords.

The only way to prevent this type of threat is to issue certificates exclusively for public DNS names and routable IP addresses.

Question 23

What's changing with ClientAuth, CA hierarchies, and Telia CA's new root CAs v3?

Accepted Answer

ClientAuth bit removed

Previously, all TLS certificates included two EKU bits: serverAuth and clientAuth. New TLS certificates issued under Telia v4 CA include only serverAuth. This means the same server certificate can no longer be used for mutual TLS. If mutual TLS is required, a separate clientAuth certificate must be configured.

Telia offers an option in the TLS menu in the portal for "OV with client bit but without Chrome trust." This certificate type is trusted in all root programs except the Chrome Root Program. Chrome will phase out and prohibit use of the client bit in 2027.

To make it easier for customers to order clientAuth certificates in the Certificate Manager Portal, Telia CA is introducing a new certificate type in the server certificate menu ("ClientAuth"). This certificate type supports mutual TLS for client authentication but is not a valid server certificate. ClientAuth certificates will be valid for three years.

CA hierarchies for TLS certificates (both OV & DV) Telia has migrated to the new "v4" issuing CA generation to meet the latest requirements from the CA/Browser Forum (multipurpose roots are no longer permitted, TLS certificates may not include the "clientAuth" bit). The legacy v3 generation will remain available alongside the new v4 generation until March 2, 2026.

Two key changes in the v4 generation:

The "clientAuth" EKU bit is removed from TLS certificates.
A new CA hierarchy is introduced. Customers must install a new 3-tier hierarchy when installing new certificates. Initially, the new hierarchy is based on the legacy root "Telia Root CA v2", but around 2028, once the new Telia root is approved by all root programs, the hierarchy will be updated to "Telia RSA Root CA v3".

Telia CA's new root CAs v3

Telia is migrating to a new root CA generation "v3" to meet the latest requirements from the CA/Browser Forum (multipurpose roots are no longer permitted).

The root v3 generation will be available alongside the current root v2 generation for several years. When browsers require it, only root v3 will be used.

Note: Chrome/Google has published new plans requiring CA hierarchies to be updated annually. This means everyone must adapt to updating CA hierarchies for new certificates. ACME handles this automatically. Root CA lifecycles will be significantly shorter in the future.

For more information, visit: https://cps.trust.telia.com/

Question 24

What's changing with domain control methods and authorization levels?

Accepted Answer

Telia is introducing persistent domain and IP validation methods in Q1 2026. These new methods enable you to configure authorization for Telia CA and use automated domain control validation with persistent DNS records. Authorization is configured by adding specific DNS TXT records to your domain.

Authorization levels are controlled by the domain owner and can be set separately at different levels in the domain hierarchy (corporate group, company, portal group, portal user, ACME user). Persistent methods reduce the need to update DNS records with random codes from the CA. Authorization remains valid until removed by the domain owner. Security is equivalent to other DNS-based methods.

Question 25

What is Post Quantum Ready and how is Telia working with it?

Accepted Answer

Post-Quantum Ready (PQR) means an organization, system, or service is prepared for the security challenges that will arise when quantum computers become powerful enough to break today's cryptographic algorithms (such as RSA and ECC).

Through close collaboration with manufacturers and clear requirements, Telia has developed a readiness plan and secured investments to ensure our certificate factory – including its underlying technology, processes, and organization – is ready for the transition to quantum-safe certificate services. It's not possible to claim "quantum-safe" status today, as the entire industry depends on the ongoing development of quantum technology.

Telia, like the rest of the industry, understands that being "quantum-safe" is a state that can quickly become vulnerable – comparable to zero-day vulnerabilities. That's why Telia focuses on crypto-agility: the ability to quickly replace or upgrade cryptographic algorithms as the technology evolves.

Quantum-safe communication means using new, stronger cryptographic methods designed to withstand future attacks from powerful quantum computers. For Telia, this is part of our roadmap and tied to our Post-Quantum Ready work.

Post-Quantum Cryptography (PQC) refers to cryptographic algorithms that resist attacks from quantum computers. When sufficiently powerful quantum computers become a reality, today's RSA- and ECC-based certificates will be quickly compromised, putting the entire Public Key Infrastructure (PKI) at risk. For Telia, this is part of our roadmap and tied to our Post-Quantum Ready work.

Post-Quantum Enabled (PQE) is a term used to indicate that a product or system is "post-quantum ready." This matters because customers require quantum-safe certificates, hybrid support, and crypto-agility. PQE means a CA or PKI is ready for PQC. For Telia, this is part of our roadmap and tied to our Post-Quantum Ready work.

Question 26

What's the ambition behind Sweden's involvement in the EU's work on digital identity?

Accepted Answer

The identity space is evolving rapidly. The EU is working to establish cooperation and alignment on how identities should be managed and verified.

Sweden is actively participating in two large-scale pilot projects initiated by the European Commission, now entering their next phase: the EUDI Wallet Consortium (EWC) and Digital Credentials for EU (DC4EU). The goal is to create a foundation for both public and private organizations to develop digital services that simplify everyday life for EU citizens across Europe. For more information, visit https://www.digg.se/digitala-tjanster/digital-identitetsplanbok.

Telia's summary of the initiative:

The framework will enable a unified digital identity within the EU – EUID (European Unified ID). EUID is also referred to as European Unified Identity or European Digital Identity, and aims to create a secure and interoperable identity that can be used across different services and platforms within the EU. The objective is to establish a trusted electronic identity for the entire EU, a common e-ID. This lays the groundwork for future EU eID implementations.

Part of the EU initiative includes providing all citizens with access to an "EU Digital Identity Wallet" or "EU Wallet" – a digital identity wallet. E-IDs will be linked to this future EU wallet, which means we'll likely become less dependent on services like BankID. This makes society more resilient.

We'll see new types of digital services where some may still use BankID, while others requiring the highest level of trust will be based on the new EU wallet. We'll also be able to access digital services throughout the EU, and other EU citizens will be able to use services in Sweden.

We'll likely be able to use our digital identity when traveling within the EU. Companies will probably rely on the EU wallet for verification in business applications like physical access control systems and other services.

A relevant question emerges: "Why build your own verification process for individuals when there's already an issuer that guarantees the highest level of identity trust?"

One positive outcome is that it will become easier for individuals to present various types of credentials, certificates, or receipts for purchases – all tied to their own identity. In the future, we'll always be able to carry these in our digital wallet, on our own terms. We decide what we carry with us. Users can control what's shared with a service, even when services have their own requirements.

This new trend and the EU initiative will likely form the basis for both public and private organizations developing digital services. How this will affect Telia and other market players remains to be seen, but we'll all be impacted to some degree.

Question 27

Does Telia publish documentation and reports related to its role as a certificate authority?

Accepted Answer

Yes, public documentation is available. As a Certificate Authority, Telia is held to strict compliance standards. You can access public documents and reports related to certificate issuance, root certificates, and other relevant information.

To view these documents, visit: https://cps.trust.telia.com/

Question 28

Are there any requirements or rules regarding the contact person's availability when requesting a certificate?

Accepted Answer

Yes, the designated contact person must be available when the order is placed, as required by international regulations. Information submitted with the certificate request must also comply with rules for Scandinavian and other special characters.

For more information, visit: https://support.trust.telia.com/sslhelp_sv.html

Question 29

What methods are used to validate TLS certificates?

Accepted Answer

When validating TLS certificates, you can choose from several methods. As an administrator, you select which validation method to use.

To review the available validation methods, visit: https://support.trust.telia.com/validering.html

Question 30

How does automation work via ACME with Telia CA?

Accepted Answer

Automation reduces manual work, human error, and operational disruptions. ACME (Automatic Certificate Management Environment) is a fully automated method for issuing and renewing server certificates according to RFC8555.

Telia offers ACME Service for issuing domain-validated (DV), organization-validated, and private TLS certificates. The service is part of Telia's certificate portal, a self-service platform available to contract customers at no additional cost.

For more information, visit: https://support.trust.telia.com/acmehelp_sv.html

Question 31

Can I authorize another party to manage my SSL certificate application?

Accepted Answer

Yes. By downloading and signing the power of attorney document, the organization registered as the owner of the organization name authorizes the applicant to manage and use the registered name when applying for TLS/SSL certificates.

To download the power of attorney document, follow this link: https://support.trust.telia.com/download/teliaorgname-fullmakt-v1.2.docx

Limited language support

Subscriptions

Phones

Phone systems

Contact Center

Broadband

Network

Internet of things

IT

Security

Cloud services

Hosting and domains

Business offers

Inspiration

SSL and Digital Certificates

What is an SSL certificate?

Order individual certificates without Telia's certificate portal

Premium Telia TLS/SSL (OV)

Premium Telia Multi TLS/SSL (OV)

Premium Telia Wildcard TLS/SSL (OV)

Get in touch about digital identities

Digital identities are the backbone of every business

Digital identities from Telia give you the following

Nordic issuer

Best prices on the market

Certificate Portal

Usage-based billing in arrears

Post Quantum Ready

Support for automation with shorter validity periods

Examples of certificates Telia offers

Server Certificates

Client Certificate

IoT Certificate

5 Pitfalls: Identity and Access Management (NIS2 Guide)

Managing existing certificates

Two kilobytes that could bring down the web – are your certificates up to date?

Frequently Asked Questions

What is a certificate?

Where do I go with questions about certificates in Sweden?

What's the difference between public and private certificates?

What's the difference between DV and OV certificates?

What's the difference between TLS and SSL?

What makes Telia's certificates a Premium option?