---
type: entity
title: UniHGW-CA
tags: [pki, certificate-authority, internal-ca]
related: [universitatsrechenzentrum-urz, dfn-pki-zertifikate, serverzertifikate, nutzerzertifikate]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_dfn_pki_zertifikate_unihgw_ca.md"]
---

# UniHGW-CA

**UniHGW-CA** is a university-internal Certificate Authority (CA) provided by the [[universitatsrechenzentrum-urz]] for the [[universitat-greifswald]].

## Purpose and Strategy
The primary motivation for maintaining an internal CA is to achieve independence from external CAs. This prevents the university's internal operations from being disrupted by changes in the behavior or policies of external certificate providers.

## Usage Guidelines
Due to the nature of internal CAs, UniHGW-CA certificates lack global trust (see [[ca-trust-anchoring]]).

### Prohibited Uses
- **Public Web Servers**: Should not be used for servers accessible to the worldwide web.
- **General Email**: Should not be used for standard email correspondence.
Using these for public services will result in trust errors in most browsers and email clients.

### Permitted Uses
- **Internal Services**: Suitable for university-internal web servers.
- **VPN Access**: The URZ is currently migrating [[nutzerzertifikate]] used for VPN access to the UniHGW-CA.

## Technical Details
- **Current Certificate**: `UniHGW-CA-2032.pem` (expires in 2032).