Thank you for the hyperlink, Joshua.
I will investigate this.

I'm not sure why the guy at Thawte got secretive and rude to you, because it's 
open information
Maybe I had a talk with a bad technical specialist.


-----------------------------------------------------------------------------------------------------------------------------
From: Joshua Bowman
Sent: Wednesday, June 13, 2012 10:07 PM
To: openssl-users@openssl.org
Subject: Re: What is the difference between green and yellow address bars in 
browser for certificate's fields?
On 6/13/2012 10:05 AM, Vladimir Belov wrote:
I need to make some corrections.

So, I think maybe there is a arrangement of CA's companies(Verisign,Thawte and 
others) with
browser's companies(Microsoft, Opera, Mozilla) that a special root or trusted 
CA’s certificate
is use for Extended Validation. Therefore, any web server's certificate which 
is signed with
this special cert is treated as cert with Extended Validation and a green bar 
is displayed.

Who has another point of view? Maybe there are some special extensions of 
X.509v3?


Regards,

Vladimir.

I'm not sure why the guy at Thawte got secretive and rude to you, because it's 
open information
and you were close to the mark the first time:
https://en.wikipedia.org/wiki/Extended_Validation_Certificate#Extended_Validation_certificate_identification

It's a bit confusing because most (maybe all?) vendors use a different 
intermediate cert for
their EV certs, but that doesn't matter, only the presence or absence of the 
OID does.

Joshua Bowman
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to