On 04.11.2013 11:44, Rob Stradling wrote: > Kaspar, since you're looking for examples of Name Constraints in the > real world, this site's certificate chain has a slightly less crazy > example... ;-) > > https://premier.intel.com
Or https://www.harica.gr. Or https://www.emporium.vt.edu. Or https://www.cpc.gov.ae. Or https://www.rentenservice.com. Etc. I wasn't specifically looking for examples. But the ICA certs at these sites are definitely of better quality than Verizon's latest feat (of course it's nonsense to also include the "."-prefixed DNS names). Kaspar -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto