Confirmed users, Administrators
5,526
edits
CA:SalesforceCommunity: Difference between revisions
→Data that CAs can Add/Modify
| Line 62: | Line 62: | ||
** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|should be added to OneCRL]] | ** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|should be added to OneCRL]] | ||
* CAs should '''not''' add records for: | * CAs should '''not''' add records for: | ||
** Intermediate certificates that the CA cannot publicly disclose | ** Intermediate certificates that the CA cannot publicly disclose '''and''' are [[CA:CertificatePolicyV2.1#Technical_Constraints_or_Auditing.2FDisclosure_of_Intermediate_Certificates|Technically Constrained]] via Extended Key Usage and Name Constraint settings. All intermediate certificate data added by CAs to Salesforce will be [[CA:SalesforceCommunity#View_Published_Reports|publicly available]]. | ||
** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|do not need to be added to OneCRL]] | ** Revoked intermediate certificates that [[CA:ImprovingRevocation#When_To_Notify_Mozilla|do not need to be added to OneCRL]] | ||
** Expired intermediate certificates | ** Expired intermediate certificates | ||