Logging in with a certificate

1. Why should I obtain a certificate?

A certificate facilitates logging into the DomainManager. When your certificate has been installed, you do not need to remember your customer number or your password. You log on with one click. Using a certificate, you can also have several users in the organization who log into the same account with unique certificates.

2. Is this more secure than logging in with a customer number and password?

Generally, it cannot be claimed that certificates are more secure. The security provided by a certificate is affected by a number of factors, such as how the digital identity is related to a physical person.

3. Can I have more than one certificate associated with the same account?

Yes, that is fine.

4. Does it cost more to log in using a certificate?

.SE does not charge a fee for this. However, the issuer of the certificate (refer to the following question) may charge a fee for the certificate.

5. How can I obtain a certificate?

Consult a certificate issuer. .SE currently only accepts certificates issued by CAcert. CAcert does not charge a fee for the certificate.

6. Why can I only use CAcert-issued certificates? There are more suppliers to choose from.

.SE decided to begin by using CAcert because they are easy to obtain a certificate from and do not charge a fee. All those who want to try logging into the DomainManager with a certificate can do so with a CAcert certificate. Ultimately, .SE will also support certificates issued by other suppliers.

7. What is the difference between certificates with and without administrator authorities?

If you log in using an administrator’s certificate, you can administer accounts, change account settings and add and remove other certificates. Those opportunities are not available if you log in using a certificate without administrator authorities.

The first certificate that is added to an account automatically receives administrator authorities. For other certificates, you must fill in the “Administrator” box when you add them for them to have administrator authorities.

8. Shall I block the log in process with a password when I have added my certificate?

This is a decision that each customer must make on their own. By creating this block, you reduce the risk of an unauthorized person obtaining your log-in information and logging into your account.

9. What do I do if my certificate no longer functions? If it is no longer valid?

Consult the issuer to renew the certificate or obtain a new one with the same identity, after which you can log into the DomainManager again.

10. I blocked the log-in process with a password and my certificate has now expired so I cannot access my account. What do I do?

First of all, you should consult the certificate issuer to renew your certificate, or obtain a new one with the same identity. If none of these options are possible, .SE’s customer service can assist in unlocking your account.

11. I tried to import another account but failed. What is the problem?

There may be several different problems, but one possibility is that the account to be imported is blocked with a password login so that the account can only be accessed using a certificate. In this case, you must first log into the account and activate the password log-in before you can continue the import process.