Lab Handbook

CRL SSL/TLS Certificate

Secure sites, indicated by an https URL, send data in encrypted form which is the reason these are called secure sites. However, most web browsers will warn you if a secure web site isn't registered with a certificate authority. At CRL, we create our own certificates which aren't registered. This doesn't mean the data isn't transferred securely, but it will cause your browser to warn you that you may be entering an untrusted web site. To avoid these warnings when accessing CRL's secure web sites and other secure services, such as IMAP or POP (using TLS or SSL options), please follow the instructions below for installing our certificate for your system so you will no longer receive the warnings.

Always use a TLS or SSL option when available for your e-mail. Without these options, your password and other personal data are sent over the Internet in plain text where they can be intercepted by unauthorized individuals.

Install the certificate

Click this icon to download the certificate and follow the steps below for installing the certificate.

Windows Vista/XP | Macintosh | Firefox (on Linux) | Alternate

Windows Vista/XP

Click the certificate icon above.

If you are using Internet Explorer, click Open to install the certificate.

If you are not using Internet Explorer, then locate the downloaded certificate file and double-click it to start the installation process.

If this window pops up, click Allow.

Click Install Certificate....

Click Next.

Select Place all certificates in the following store.

Click Browse....

Windows XP Note: The steps for installing certificates in Windows XP do not require this selection. Simply click Next and continue with the steps below.

Select Trusted Root Certification Authorities.

Click OK.

Click Next.

Click Finish.

Click Yes.

Click OK.

Macintosh

Quit any running web browsers or E-mail programs.

Click the certificate link above to download the certificate to your Downloads folder.

Locate your Downloads folder and double-click the crl.crt certificate to install it.

For Mac OS 10.4, add the certificate to your X509Anchors Keychain.

For Mac OS 10.5, add the certificate to your System Keychain.

Click OK.

For Mac OS 10.4, add the certificate to your X509Anchors Keychain.

For Mac OS 10.5, add the certificate to your System Keychain.

Click OK.

You may need to type in an administrator's name and password to install the certificate.

Firefox (on Linux)

Click the certificate link above to download the certificate to your Downloads folder.

Locate your Downloads folder and right-click the crt file to make sure it will open in Firefox or whichever web broswer you use. If your web browser is not listed, choose Open with Other Application... and locate your browser in the list and select it.

Check the first box only for the Certificate Authority and click OK.

Close the open tabbed window that may have appeared when opening the crt file with Firefox.

Alternate Installation

In some cases, opening up a web page to https://crl.ucsd.edu will prompt you to install the certificate either temporarily or permanently. If given that choice, you may choose "permanently". Please make sure you read the security note before doing this, however, to be certain you typed the correct URL.