Eddy Nigg (StartCom Ltd.) wrote: > Also many times there are some umbrella CAs setup to support those > regulations and by including them, it will include automatically a bunch > of other CAs as well. I believe KISA is such a CA...??
Yes, as noted in the bug KISA/KCAC doesn't issue end entity certificates directly, but has subordinate CAs which do so. (As you note, this is a common setup in many countries.) That's why Gerv and I invested a fair amount of effort trying to determine what these subordinate CAs actually do. Frank -- Frank Hecker [EMAIL PROTECTED] _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto