CDRouter TR-069 includes a number of different certificate files for
SSL testing. All certificates are distributed in .pem format and
located in the /usr/share/doc/cdrouter/ directory on the CDRouter
host system.
Comodo Certificates (CDRouter 10.6 and Later)
Starting with CDRouter 10.6, new ACS and ACS download server certificates, signed by Comodo, are shipped with CDRouter. These certificates are valid until March of 2020, and may require the installation of a new root CA certificate on devices that had been configured to use CDRouter’s previous Verisign certificates.
| Certificate Type | File | Expiration Date |
|---|---|---|
| ACS certificate | acs.qacafe.com.pem | March 11, 2020 |
| Download server | acs-download.qacafe.com.pem | March 11, 2020 |
| Intermediate CA | acs.qacafe.com-ca.pem | February 11, 2029 |
| Root CA | acs.qacafe.com-rootca.pem | May 30, 2020 |
Verisign Certificates (CDRouter 10.5 and Earlier)
CDRouter 10.5 and earlier releases shipped with ACS and ACS download server certificates signed by Verisign. These certificates expire in June and August of 2018 and have been replaced with the new Comodo signed certificates available above.
To validate the Verisign ACS and download server certificate an intermediate certificate is required. Using the intermediate and root CA provided here the server certificate can be validated entirely in 2048 bits.
| Certificate Type | File | Expiration Date |
|---|---|---|
| ACS certificate | acs.qacafe.com.pem | June 9, 2018 |
| Download server | acs-download.qacafe.com.pem | August 13, 2018 |
| Intermediate CA | acs.qacafe.com-ca.pem | February 7, 2020 |
| Root CA | acs.qacafe.com-rootca.pem | July 16, 2036 |
Self-signed Certificates
The self-signed ACS and download server certificates can be validated entirely in 2048 bits using the intermediate and root CA provided here.
| Certificate Type | File | Expiration Date |
|---|---|---|
| ACS certificate | acs.qacafe.com-self.pem | September 16, 2024 |
| Download server | acs-download.qacafe.com-self.pem | September 16, 2024 |
| Intermediate CA | acs.qacafe.com-ca-self.pem | June 25, 2044 |
| Root CA | acs.qacafe.com-rootca-self.pem | June 25, 2044 |
Older CPE Devices
CDRouter’s Verisign ACS and download certificates can also be validated using a 1024 bit root CA. This chain requires two intermediate certificates which are available in the file provided here.
| Certificate Type | File | Expiration Date |
|---|---|---|
| Intermediate CAs | acs.qacafe.com-1024ca.pem | February 7, 2020 |
| Root CA | acs.qacafe.com-1024rootca.pem | August 1, 2028 |
