Unless we're missing something very badly (always
a possibility), Verisign is still the key player in
the server side certificate market, with Thawte
next up. There are a number of smaller up and
coming CAs out there as well - we've been publishing
stats on the pentration of CAs, and SSL as a whole
in our on-line secure web survey located
at http://www.e-softinc.com.
Also, we have all the root certs we use for
validating sites as part of our survey on-line
as well at http://www.e-softinc.com/cacerts.txt
Cheers, Thomas
"Rene G. Eberhard" wrote:
>
> > Is there a repository of root certificates somewhere I can use to
> > verify SSL servers against? How can I extract root certificates from
> > Netscape and IE?
>
> I think Verisign is not anylonger the keyplayer in the certificate
> market. IE 5.01 contains about 120 root certificates.
>
> About your request:
> 1. You may download IE 5.01 and extract all the 120 root certs.
> 2. You can send me a mail and I send you (personal email) a zipped
> archive which includes all the 120 root certs PEM encoded.
>
> Regards Rene
>
> --
> -----------------------------------------------------------
> Rene G. Eberhard
> Mail : [EMAIL PROTECTED]
--
------------------------------------------------------------
Thomas Reinke Tel/Fax: (905) 331-2260
Director of Technology Cell: (416) 460-7021
E-Soft Inc. http://www.e-softinc.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]