Trusted root certification bodies for rafisa.org

The root certificates for the Windows domain rafisa.org can be downloaded here:
DC-ZH-02-CA
DC-FR-02-CA

Installing the certificates under Mac OSX

First download the two root certificates. Double-click on the certificate to open the keychain. Select the keychain in which you want to save the certificates:

Then open the keychain and search for the saved certificate. Double-click the certificate and change the trust settings to „Always trust“:

Installing the certificates under Linux (Ubuntu)

Under Ubuntu (tested version 23.10), the Chrome and Firefox browsers use their own certificate stores by default. The import is shown here for Chrome as an example. The certificate store can be found under Settings/Privacy and security/Security/Manage certificates. The downloaded certificate can be found there under Certification Authorities can be imported:

The trust settings of the certificate must then be defined:

The import is similar for Firefox. In Firefox, you can find the certificate store under Settings/Privacy and security/Certificates.

Installing the Certificates System-Wide on Linux (Ubuntu)

1. Copy Certificates Copy the downloaded certificates to the correct directory:

 sudo cp DC-ZH-02-CA.cer /usr/local/share/ca-certificates/DC-ZH-02-CA.crt
 sudo cp rafisa-dc-fr-02-ca.cer /usr/local/share/ca-certificates/DC-FR-02-CA.crt

2. Update CA Database Run the following command to update the system's certificate authority database and make the certificates trusted system-wide:

 sudo update-ca-certificates

3. Done! The certificates are now trusted across the entire Linux system.