Confirmed users, Administrators
5,526
edits
CA/BR Audit Guidance: Difference between revisions
→Whole-Population Audit of Intermediate Certs
| Line 47: | Line 47: | ||
Definition: An intermediate certificate that does not have an Extended Key Usage (EKU) extension, has id-kp-serverAuth extended key usage, or has the anyExtendedKeyUsage KeyPurposeId is considered '''''capable''''' of issuing SSL certificates. | Definition: An intermediate certificate that does not have an Extended Key Usage (EKU) extension, has id-kp-serverAuth extended key usage, or has the anyExtendedKeyUsage KeyPurposeId is considered '''''capable''''' of issuing SSL certificates. | ||
[[File:MozillaCA-BR-Audit.pdf|framed|CA Hierarchy]] | |||
== WebTrust BR Audit Statement == | == WebTrust BR Audit Statement == | ||