Accountapprovers, antispam, confirm, emeritus
4,925
edits
Changes
Add basic cross-signing info
* The question of why StartCom was able to trigger certificate-issuance code which WoSign has stopped developing and maintaining is also still open.
==Cross Signing==
It is important background information to know which WoSign roots are cross-signed by other trusted or previously-trusted roots. The following cross-signatures are currently known:
{| class="wikitable"
!Target
!Source
!Expiry
!Comments
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=CA 沃通根证书
|/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority
|2019-12-31T23:59:59Z
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
|/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority
|2019-12-31T23:59:59Z
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2
|/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA
|2020-11-02T01:01:59Z
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2
|/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA
|2020-11-02T01:59:59Z
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN - DATACorp SGC</nowiki>
|2019-06-24T19:06:30Z
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object</nowiki>
|2019-07-09T18:40:36Z
|}
==Other Points of Note==
* While not a violation of any Mozilla policy, WoSign has promised to log all certs to CT after a certain date, and yet has not yet managed to comply with the Chrome CT policy of logging to at least one Google and one non-Google log. Arguably, this speaks to competence.
