Changes

Jump to: navigation, search

CA/WoSign Issues

1,375 bytes removed, 11:32, 24 October 2016
Remove revoked Comodo cross-signs
|[https://crt.sh/?id=10591186 2020-11-02T01:59:59Z]
|
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN - DATACorp SGC</nowiki>
|Comodo
|[https://crt.sh/?id=3223853 2019-06-24T19:06:30Z]
|Rob Stradling of Comodo writes: "This cross-certificate is currently unexpired and unrevoked. However, the 'UTN - DATACorp SGC' root was [https://bugzilla.mozilla.org/show_bug.cgi?id=1208461 removed from NSS] last year. 'UTN - DATACorp SGC' was also cross-certified by the 'AddTrust External CA Root' root, but we revoked the cross-certificates in December 2015."
|- style="vertical-align:top;"
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object</nowiki>
|Comodo
|[https://crt.sh/?q=Certification+Authority+of+WoSign&iCAID=1395 2019-07-09T18:40:36Z]
|Rob Stradling of Comodo writes: "These two cross-certificates are currently unexpired and unrevoked. However, the 'UTN-USERFirst-Object' root is only enabled for the Code Signing trust bit in NSS. There are 2 cross-certs (currently unconstrained and unrevoked) issued by 'AddTrust External CA Root' to 'UTN-USERFirst-Object'. However, the cross-certs issued to WoSign are EKU-constrained to Code Signing/Time Stamping."
|}
Accountapprovers, antispam, confirm, emeritus
4,925
edits

Navigation menu