> On Aug 17, 2017, at 07:19, ramirommunoz--- via dev-security-policy 
> <dev-security-policy@lists.mozilla.org> wrote:
> 
> https://crt.sh/?id=112929021&opt=cablint
> is a precertificate. You can see the CT Precertificate Poison critical 
> extention. 

The serial number of this certificate should still be added to the relevant 
CRL, as it is not possible to prove the non-existance of a corresponding 
certificate without the CT Poison extension.

Jonathan
_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to