Account confirmers, Anti-spam team, Confirmed users, Bureaucrats and Sysops emeriti
4,925
edits
CA/WoSign Issues: Difference between revisions
Complete cross-signing section
(Add basic cross-signing info) |
(Complete cross-signing section) |
||
| Line 256: | Line 256: | ||
!Target | !Target | ||
!Source | !Source | ||
!Source Owner | |||
!Expiry | !Expiry | ||
!Comments | !Comments | ||
| Line 261: | Line 262: | ||
|/C=CN/O=WoSign CA Limited/CN=CA 沃通根证书 | |/C=CN/O=WoSign CA Limited/CN=CA 沃通根证书 | ||
|/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority | |/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority | ||
|StartCom | |||
|2019-12-31T23:59:59Z | |2019-12-31T23:59:59Z | ||
| | |||
|- style="vertical-align:top;" | |- style="vertical-align:top;" | ||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | |/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | ||
|/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority | |/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority | ||
|StartCom | |||
|2019-12-31T23:59:59Z | |2019-12-31T23:59:59Z | ||
| | |||
|- style="vertical-align:top;" | |- style="vertical-align:top;" | ||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2 | |/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2 | ||
|/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA | |/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA | ||
|Asseco Data Systems S.A. | |||
|2020-11-02T01:01:59Z | |2020-11-02T01:01:59Z | ||
| | |||
|- style="vertical-align:top;" | |- style="vertical-align:top;" | ||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2 | |/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2 | ||
|/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA | |/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA | ||
|Asseco Data Systems S.A. | |||
|2020-11-02T01:59:59Z | |2020-11-02T01:59:59Z | ||
| | |||
|- style="vertical-align:top;" | |- style="vertical-align:top;" | ||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | |/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | ||
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN - DATACorp SGC</nowiki> | |<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN - DATACorp SGC</nowiki> | ||
|2019-06-24T19:06:30Z | |Comodo | ||
|[https://crt.sh/?id=3223853 2019-06-24T19:06:30Z] | |||
|Rob Stradling of Comodo writes: "This cross-certificate is currently unexpired and unrevoked. However, the 'UTN - DATACorp SGC' root was [https://bugzilla.mozilla.org/show_bug.cgi?id=1208461 removed from NSS] last year. 'UTN - DATACorp SGC' was also cross-certified by the 'AddTrust External CA Root' root, but we revoked the cross-certificates in December 2015." | |||
|- style="vertical-align:top;" | |- style="vertical-align:top;" | ||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | |/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | ||
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object</nowiki> | |<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object</nowiki> | ||
|2019-07-09T18:40:36Z | |Comodo | ||
|[https://crt.sh/?q=Certification+Authority+of+WoSign&iCAID=1395 2019-07-09T18:40:36Z] | |||
|Rob Stradling of Comodo writes: "These two cross-certificates are currently unexpired and unrevoked. However, the 'UTN-USERFirst-Object' root is only enabled for the Code Signing trust bit in NSS. There are 2 cross-certs (currently unconstrained and unrevoked) issued by 'AddTrust External CA Root' to 'UTN-USERFirst-Object'. However, the cross-certs issued to WoSign are EKU-constrained to Code Signing/Time Stamping." | |||
|} | |} | ||