On 01/09/16 11:18, Peter Gutmann wrote:
Rob Stradling <rob.stradl...@comodo.com> writes:

https://crt.sh/?serial=056d1570da645bf6b44c0a7077cc6769&iCAID=1662 says
"Not Revoked" three times.  I wonder if that's causing some confusion here.

Just to make sure I'm not misreading this in some way, is this really saying
there are 313 certs issued all with the same serial number?

Yes, it's really saying that.

I guess it makes them easy to revoke, if a single revocation can kill 313
certs at once.

That's true. It'd be impossible to revoke (via CRL and/or OCSP) a subset of those 313 certs though.

--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online

_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to