Confirmed users, Administrators
5,526
edits
CA:SalesforceCommunity: Difference between revisions
→Which intermediate certificate data should CAs add to Salesforce?
| Line 60: | Line 60: | ||
** Every intermediate certificate (chaining up to a root certificate in Mozilla's program) that is not [[CA:CertificatePolicyV2.1#Technical_Constraints_or_Auditing.2FDisclosure_of_Intermediate_Certificates|Technically Constrained]] via Extended Key Usage and Name Constraint settings. | ** Every intermediate certificate (chaining up to a root certificate in Mozilla's program) that is not [[CA:CertificatePolicyV2.1#Technical_Constraints_or_Auditing.2FDisclosure_of_Intermediate_Certificates|Technically Constrained]] via Extended Key Usage and Name Constraint settings. | ||
** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|should be added to OneCRL]] | ** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|should be added to OneCRL]] | ||
* CAs | * CAs should '''not''' add records for: | ||
** Intermediate certificates (chaining up to a root certificate in Mozilla's program) that are [[CA:CertificatePolicyV2.1#Technical_Constraints_or_Auditing.2FDisclosure_of_Intermediate_Certificates|Technically Constrained]] via Extended Key Usage and Name Constraint settings. | |||
** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|do not need to be added to OneCRL]] | |||
** Expired intermediate certificates | ** Expired intermediate certificates | ||
== Add Intermediate Certificate Data to Salesforce == | == Add Intermediate Certificate Data to Salesforce == | ||