Account confirmers, Anti-spam team, Confirmed users, Bureaucrats and Sysops emeriti
4,925
edits
CA/WoSign Issues: Difference between revisions
Add basic cross-signing info
(Update to indicate list of affected certs for L is incomplete) |
(Add basic cross-signing info) |
||
| Line 249: | Line 249: | ||
* The question of why StartCom was able to trigger certificate-issuance code which WoSign has stopped developing and maintaining is also still open. | * The question of why StartCom was able to trigger certificate-issuance code which WoSign has stopped developing and maintaining is also still open. | ||
==Cross Signing== | |||
It is important background information to know which WoSign roots are cross-signed by other trusted or previously-trusted roots. The following cross-signatures are currently known: | |||
{| class="wikitable" | |||
!Target | |||
!Source | |||
!Expiry | |||
!Comments | |||
|- style="vertical-align:top;" | |||
|/C=CN/O=WoSign CA Limited/CN=CA 沃通根证书 | |||
|/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority | |||
|2019-12-31T23:59:59Z | |||
|- style="vertical-align:top;" | |||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | |||
|/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority | |||
|2019-12-31T23:59:59Z | |||
|- style="vertical-align:top;" | |||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2 | |||
|/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA | |||
|2020-11-02T01:01:59Z | |||
|- style="vertical-align:top;" | |||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign G2 | |||
|/C=PL/O=Unizeto Sp. z o.o./CN=Certum CA | |||
|2020-11-02T01:59:59Z | |||
|- style="vertical-align:top;" | |||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | |||
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN - DATACorp SGC</nowiki> | |||
|2019-06-24T19:06:30Z | |||
|- style="vertical-align:top;" | |||
|/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign | |||
|<nowiki>/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object</nowiki> | |||
|2019-07-09T18:40:36Z | |||
|} | |||
==Other Points of Note== | ==Other Points of Note== | ||
* While not a violation of any Mozilla policy, WoSign has promised to log all certs to CT after a certain date, and yet has not yet managed to comply with the Chrome CT policy of logging to at least one Google and one non-Google log. Arguably, this speaks to competence. | * While not a violation of any Mozilla policy, WoSign has promised to log all certs to CT after a certain date, and yet has not yet managed to comply with the Chrome CT policy of logging to at least one Google and one non-Google log. Arguably, this speaks to competence. | ||