Hello Mr Joel,

Like I wrote before, our CA,  we do not issue EV CERTIFICATES only OV 
CERTIFICATES. Regarding the use of a named-constraints to restrict .br 
domains only, we issue certificates to governments and also to national and 
international private entities that wish to have a certificate within the 
Brazilian public key infrastructure. 

Lucia Castelli

Em domingo, 4 de dezembro de 2022 às 21:51:30 UTC-3, [email protected] 
escreveu:

> Hello all:
>
> There is also this cert for infoconv.sicredi.io: 
> https://crt.sh/?id=6202101964 
> If I'm reading this right it expires in 2023 and is also not .br. It is 
> for the 
> organization BANCO COOPERATIVO SICREDI - S/A. The domain doesn't work for 
> me
> though. The real bank seems to be hosted at: sicredi.com.br but also 
> looks like
> it is called Banco Cooperativo Sicredi SA. I'm new to this: does this mean 
> it is
> more than an DV cert if something is listed here, as in the presence of an
> organization imply an OV or EV cert? I looked at a few Let's Encrypt certs 
> and
> couldn't find any organization listed on them, just common name. So if 
> this a 
> OV/EV cert and its not actually the bank's domain it is rather concerning.
>
> Thanks,
> Joel Reardon
>
>
>
> On Friday, December 2, 2022 at 9:49:14 AM UTC-7 Lucia Castelli wrote:
>
>> Hi Hubert,
>>
>> After the question, the baseline requirements SSL, have priorities over 
>> the regulations of ICP-Brasil, even ICP-Brasil itself declares this 
>> priority in the regulations currently.
>>
>> Thank you.
>>
>> Lucia
>>
>> Em sexta-feira, 2 de dezembro de 2022 às 13:18:00 UTC-3, [email protected] 
>> escreveu:
>>
>>> On Fri, Dec 2, 2022 at 7:23 AM Lucia Castelli <[email protected]> 
>>> wrote:
>>>
>>>> All,
>>>> First, would like to say that we stoped to answer the questions, 
>>>> because at  November was introduced another subject in that Public List, 
>>>> that was different about SERPRO SSL CA. 
>>>>
>>>> Bellow we answer all the outstanding questions:
>>>>
>>>> SERPRO SSLCA is subject to the Brazilian Public Key Infrastructure 
>>>> (ICP-Brasil) and the rules in force in ICP-Brasil.
>>>>
>>> What happens in the case that there is conflict between Root Program 
>>> requirements and the rules in force in ICP-Brasil?
>>>
>>> /hubert
>>>  
>>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"public" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/ccadb.org/d/msgid/public/116f94ef-c52c-4253-ae5a-9fdddf11a371n%40ccadb.org.

Reply via email to