Skip to main content

Live/Production Environment

This webpage contains certificate information for customer wishing to connect to the Live Environment

Certificates for the Live/Production Environment

For convenience we are providing copies of NHS Digital live RootCA and SubCA certficates for customer wishing to connect to the production environment.

RootCA and SubCA certificates

Certificates in the production environment are valid up to 27 June 2022, when the current Sub CA certificate expires.  NHS Digital are upgrading the CA infrastructure across its environments. The Path to live environments have all been upgraded to a new SHA2 CA.  All new certificates being generated in the Path to Live environments will be SHA2 certificates, users are requested to download and install the new root and sub CA certificates for these environments from this website. 

The existing Production certificates and the  SHA 2 Production certificates are provided on this website for your convenience. 

The deployment of the Live SHA2 certificates in the Production environment is currently scheduled for the early September 2020. Please note that the the deployment of the SHA2 CA into the production environment had been delayed due to the Covid-19 pandemic. NHS Digital took the decision to delay the deployment of the CA to avoid disruption to key NHS services during this critical time. This does mean certificates cut in Production after the 27 June 2020 will not be valid for the full two year duration

In order to establish a connection to the Live environment, a chain of trust must be set up using the RootCA and SubCA certificates. 

  1. Copy the required RootCA or SubCA certificate. SHA1 certificates are valid till 27 June 2022.  If you will be using both existing SHA1 and new SHA2 certificates you will need to install both sets of certificates. Installing both certificates into your trust store will not affect your connectivity as Spine will accept either certificate until the SHA1 certificates naturally expire in June 2022.
  2. Open Notepad or similar and paste the certificate - save the file locally with a suitable file name
  3. Locate the locally saved text file and change the file extension from .txt to .der
  4. Import the certificate into the local trusted certificate store - use the documentation from your software supplier as this may vary between applications

Please note that the: 

  • RootCA should be placed in 'Trusted Root Certification Authorities' 
  • SubCA should be placed in 'Intermediate Certification Authorities'

RootCA (valid till June 2024). Please note the same Root CA certificate was used to create both the SHA1 and SHA2 subCA certificates.

COPY
-----BEGIN CERTIFICATE-----

MIID9zCCAt+gAwIBAgIEQKIPtjANBgkqhkiG9w0BAQUFADA4MQwwCgYDVQQKEwNO

SFMxCzAJBgNVBAsTAkNBMRswGQYDVQQDExJOSFMgUm9vdCBBdXRob3JpdHkwHhcN

MDQwNjA0MTA1ODMxWhcNMjQwNjA0MTEyODMxWjA4MQwwCgYDVQQKEwNOSFMxCzAJ

BgNVBAsTAkNBMRswGQYDVQQDExJOSFMgUm9vdCBBdXRob3JpdHkwggEiMA0GCSqG

SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIzZXhKyitE4BTeiay48TioOBds/PbC1h

zE36faAdwLuU33BVQNWNi/lA/sTi6kvJs4vCgDrEOeY2TuS+tZhqOmdQHcJIQZYW

fjPjtT3Q5IdR0NI0sUyTo7qcD+1Uutiv7Mr290NfFky6z4Ibj19QvfF10iC2jLd2

p7dJ3MQq2jdJWiVyI8NkgavyLj7N8CpF2Trb7g/K4J57+oxzRShtCJNLVseK3InV

TIejOJ6FaH5dqbVA63dtu9YwK9J1IP2O0IL1InSZIulNkCXFlGI38PDnNdFgPwYx

dhFZ1FD9X+zkVmwvI1CGzn+OiVH/l/ANRBxhh/yhUDwBFoNz6IxXAgMBAAGjggEH

MIIBAzBaBgNVHR8EUzBRME+gTaBLpEkwRzEMMAoGA1UEChMDTkhTMQswCQYDVQQL

EwJDQTEbMBkGA1UEAxMSTkhTIFJvb3QgQXV0aG9yaXR5MQ0wCwYDVQQDEwRDUkwx

MCsGA1UdEAQkMCKADzIwMDQwNjA0MTA1ODMxWoEPMjAyNDA2MDQxMTI4MzFaMAsG

A1UdDwQEAwIBBjAfBgNVHSMEGDAWgBTjJxeTzCue37VWdXJzwtcLoJ3wWzAdBgNV

HQ4EFgQU4ycXk8wrnt+1VnVyc8LXC6Cd8FswDAYDVR0TBAUwAwEB/zAdBgkqhkiG

9n0HQQAEEDAOGwhWNy4wOjQuMAMCBJAwDQYJKoZIhvcNAQEFBQADggEBAIHWfvzc

bYSyFcMWQnUzplM0u0559K+KEMzlM5+TDgqzC3K94Y09mWYUMyS+qoYV88VzaKyb

38FSs2/uNhPTXMduhqQTIoPiR2DFMjgjCMoAfvh9R2pFnbpncXLa9I1aN9RgYryC

k/6d7UP+gBurwfxmyObiCmozMIvIpoRXNKRqhqh/zKUKI7/tc2t/ris2bOw2j5X1

aqflzrrBh/DEFkvK9InQg6cYdMOqWT/iQ+WOc/UIisNXGfYFsAnD7XUlHf7+Z8FN

EtUptUqiBkmMvXfy9Bgv/pqqZe8HedZjQAc6SgE+DfBuU8CZt6h1WCZu4YlAaFPF

g1qeO4bUm+/96oA=

-----END CERTIFICATE-----

plaintext

SubCA NHS Level1A (SHA 1 certificate, valid till June 2022)

COPY
-----BEGIN CERTIFICATE-----

MIID2zCCAsOgAwIBAgIET4ajUDANBgkqhkiG9w0BAQUFADA4MQwwCgYDVQQKEwNO

SFMxCzAJBgNVBAsTAkNBMRswGQYDVQQDExJOSFMgUm9vdCBBdXRob3JpdHkwHhcN

MTIwNjI3MTIzOTA3WhcNMjIwNjI3MTMwOTA3WjAyMQwwCgYDVQQKEwNuaHMxCzAJ

BgNVBAsTAkNBMRUwEwYDVQQDEwxOSFMgTGV2ZWwgMUEwggEiMA0GCSqGSIb3DQEB

AQUAA4IBDwAwggEKAoIBAQCnhylFd2Xwx8jCGCSb4AeHDLbU5eEMvCtRMm6Ot4qH

Z6C0X3qXe6O6y6cKKXD2mYJXTpWwg68stD9WH1MwuE+s5iZWPyJj+mh3EWRMcTdP

vetAN8goHKEYlVVq5ylIGyKrefP+np7PJtC2S5XH+mG2LCUL1iDlBUtZzsReQvSs

3PHD1mznrNg5yuCYRKAUuJAvwwzSl8zYR26e+ku7Tpu/yYzI7AReyEab8IIE5PV+

Ceha5AOmikX1lRplwOofhsN+Ker1e7coe23vqRBgn7pRNqLWqLq5I1vS+BL88dkO

pMsKJHNrPEPnFlWDwoyea23ub05YKjDy8yNHYsVRxC2ZAgMBAAGjgfIwge8wWgYD

VR0fBFMwUTBPoE2gS6RJMEcxDDAKBgNVBAoTA05IUzELMAkGA1UECxMCQ0ExGzAZ

BgNVBAMTEk5IUyBSb290IEF1dGhvcml0eTENMAsGA1UEAxMEQ1JMMTAYBgNVHSAE

ETAPMA0GCyqGOgCJe2UAAwIAMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEG

MB8GA1UdIwQYMBaAFOMnF5PMK57ftVZ1cnPC1wugnfBbMB0GA1UdDgQWBBS9t4BE

zD0FqjdrA8VQVlvXyskF6zAZBgkqhkiG9n0HQQAEDDAKGwRWOC4xAwIAgTANBgkq

hkiG9w0BAQUFAAOCAQEAcA86N61v/9tpxzIoKsMqOiZJ/L8v8OXFYOPptckWp9t3

X45te0jjWQ0SQRbtgN3pAYVtvCIlyJc3s9V96Ij7kFaAhR3L3C1hpAXPwKKyKBNX

0fc6OpJc1YgxsfSJkOKH+SEtAONyWGbqlOW+BGNRDZB0POkCjTfzQU7fsO3zrKNM

ni/xat/p0xj3UvFAfeLy78JWyP2vVRuMN8Rt/CMf7bQBJ2+30nj/7V4seahF4Xvd

TEpbcnzlBq86OOHBqHGRnhWfEAXpGAhncOho4BVlmbYUN4hWO5AUkGWWpq2C7F0+

PQ7I8K49ciexv3xw9wr5CMFgs5qgwZfIwMjo8zZU+Q==

-----END CERTIFICATE-----

plaintext

SubCA NHS Level1A (SHA2 certificate, valid till June 2024)

COPY
-----BEGIN CERTIFICATE-----

MIIECjCCAvKgAwIBAgIET4alRTANBgkqhkiG9w0BAQsFADA4MQwwCgYDVQQKEwNO

SFMxCzAJBgNVBAsTAkNBMRswGQYDVQQDExJOSFMgUm9vdCBBdXRob3JpdHkwHhcN

MTcwNDEyMDkyOTI5WhcNMjQwNjA0MTEyODMxWjAyMQwwCgYDVQQKDANuaHMxCzAJ

BgNVBAsMAkNBMRUwEwYDVQQDDAxOSFMgTGV2ZWwgMUMwggEiMA0GCSqGSIb3DQEB

AQUAA4IBDwAwggEKAoIBAQCWfw77SnzZcor5ygbv4Y5/OsPXgvmUUI8qNK5PdMUO

0jvwVYX+mdsLA6ZJLbj/QslbFjIecYunr7f/lA/3AO3Y37uBn7jHB6hwtu2r2JNj

z38efNHBkwczI5S7cpLa+Wm9Z/7PKzEC1yRCBFQdY8bTPbngm81LEK0fl2DOEZop

XSSy1hqtGVQB7LNpBAxLF3uHdyQGdXV5gFb3YBpbAh+XUw8LyQhQ/BnzJGtSVczB

rsFo0DNlHdMRsynxHMuyVbebUOojU1uFIgsktc0yAhsq2Wak6DaBvEnuZvA9+PhM

6PrtjU715n+G4s2mo5R8WMqTm4sOuFIPr3g/FU8nQVWnAgMBAAGjggEgMIIBHDCB

hgYDVR0fBH8wfTBPoE2gS6RJMEcxDDAKBgNVBAoTA05IUzELMAkGA1UECxMCQ0Ex

GzAZBgNVBAMTEk5IUyBSb290IEF1dGhvcml0eTENMAsGA1UEAxMEQ1JMMTAqoCig

JoYkaHR0cDovL2NybC5uaHMudWsvbGl2ZS9yb290L0NSTDEuY3JsMBgGA1UdIAQR

MA8wDQYLKoY6AIl7ZQADAgAwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAQYw

HwYDVR0jBBgwFoAU4ycXk8wrnt+1VnVyc8LXC6Cd8FswHQYDVR0OBBYEFLppo+N6

4nw9N1dSb+nzE2RM4cC1MBkGCSqGSIb2fQdBAAQMMAobBFY4LjEDAgCBMA0GCSqG

SIb3DQEBCwUAA4IBAQAFvGEGRdjD0A6L+/x3sI86BkaRlbM3rvUQa8dqpmxeOtsO

A24ou5VWj9DoDttCG16DFpwHk2cYEq2h4OJTgUPodb/iKgIXbCW7Z8UZziowYwGF

H1Bos72iB175bfX2idniEnp/3+9mS3xoEffSv8exa/QAf0ehQlv3+ZiaQog87nxc

CdTyEUpF7En5YKFGgmBRrWJskaQKmQuW2k+voy3TKKHc47M+SD3URgT09UOGjnCj

KhVwSsvq6AKyJbJPMB/d0BWFmgaABosOIyYO9sCi3WHKZKHTMM5gV8Hgl45YY2Z6

DAMMGmYK5/C3KiSM98GBeA3/m02S8nupSMgUYaf+

-----END CERTIFICATE-----

plaintext

Last edited: 3 August 2020 2:55 pm