RE: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread Jeremy Rowley
Whether they are currently issuing is irrelevant. Mozilla's policy: "Beginning with Version 2.1 of Mozilla's CA Certificate Policy, for any certificate which directly or transitively chains to the root certificates you currently have included in Mozilla's CA Certificate Program, which are capable

RE: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread robin.lin
Hello Rob, What if the CA is no longer issue certificate? Thanks, Robin Lin (Wei Tsong Lin) CSSLPR Project Manager Research and Developing Department TAIWAN-CA INC. TEL:+886-2-2370-8886 ext. 721 FAX:+886-2-2370-0728 E-mail:robin@twca.com.tw 10th Floor, 85 Yenping South Road, 10043 Taipei, Ta

Re: Should we block Blue Coat's 'test' intermediate CA?

2016-06-20 Thread Sanjay Modi
We have posted more updates here, specifically regarding Symantec’s acquisition of Blue Coat. To be clear, Symantec always maintained control of the private key with regards to Blue Coat’s intermediate CA, which you

Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread Rob Stradling
On 20/06/16 21:15, Ben Wilson wrote: When I try to upload some of these listed as "Unconstrained id-kp-serverAuth Trust" undisclosed, I get a warning that says, "This certificate is considered to be technically-constrained as per Mozilla policy, so it does not need to be added to the CA Community

Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread Rob Stradling
On 20/06/16 18:58, Peter Bowen wrote: On Fri, Jun 17, 2016 at 4:12 AM, Rob Stradling wrote: Friendly reminder to all CA representatives: Don't forget the June 30th deadline! And don't leave it until the last minute if you have lots of intermediate certificates to disclose! https://crt.sh/moz

RE: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread Ben Wilson
And when I try to enter another certificate on the list, which happens to be a very large certificate with lots of name constraints, I get this error message: Error: PEM info is exceeding field length. Please check the certificate or contact Mozilla administrator. -Original Message- Fr

RE: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread Ben Wilson
When I try to upload some of these listed as "Unconstrained id-kp-serverAuth Trust" undisclosed, I get a warning that says, "This certificate is considered to be technically-constrained as per Mozilla policy, so it does not need to be added to the CA Community in Salesforce. All data that you enter

Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-20 Thread Peter Bowen
On Fri, Jun 17, 2016 at 4:12 AM, Rob Stradling wrote: > Friendly reminder to all CA representatives: > > Don't forget the June 30th deadline! And don't leave it until the last > minute if you have lots of intermediate certificates to disclose! > > https://crt.sh/mozilla-disclosures > ...lists (un