====== Certificates - verifying our network identity ======

In case you need our RADIUS server certificate, or the Certificate Authority certificate, we offer download below.

Local copies are also available below.

**CA certificates:** \\
<del>
[[https://pki.cesnet.cz/cs/certificates-tcs.html?redirect=1#hellenic_academic_and_research_institutions_rootca_2015_korenovy_certifikat|CESNET – CA for server certificatesh]] ({{ :verejne:sit:crt-hellenic-academic-and-research-institutions-rootca-2015.pem|HARICA RootCA 2015 - local copy in PEM format}})
</del>

<note warning>We are temporarely using [[https://letsencrypt.org/certificates/|Let's Encrypt]] certificates, use verification against system certificates</note>
**CA certifikáty:** \\
[[https://crt.sh/?caid=7394|ISRG Root X1 (Let's Encrypt root CA)]] (**{{ :verejne:sit:isrg_root_x1.pem | ISRG Root X1 - local copy in PEM format}}**)

===== Install certificates in OS Android =====

First, download certificates from above (highlighted in bold) your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.

The following instructions differ from device to device, but they all follow the same theme:

In your Android device:

  * Go to **Settings** -> **Wi-Fi**.
  * Go to **Advanced Wi-Fi**. This can be hidden in a context menu.
  * Choose **Install a certificate**.
    * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
    * Choose Wi-Fi as a certificate type, if possible.
    * Confirm the installation.
  * Then, [[en:verejne:sit:wi-fi:android|during setting up Wi-Fi]], select this new certificate as a **CA certificate**.

<note important>
When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above.
</note>