Hi Julien, > From: Julien Pierre [mailto:[EMAIL PROTECTED]] > Can anyone point to a free public CA which offers the > capability to look > up certificates, for example by name or e-mail address ? LDAP search > capability would be ideal.
https://www.verisign.com/products/class1/index.html We've been giving away s/mime certificates for years. If you want the convenience of a longer lasting certificate you'll have to buy one but the shorter term validity ones are free. We've issued millions of Class 1 certificates. These are searchable both via web form as well as LDAP. The VeriSign directory server, directory.verisign.com, has been up for many years - I use it with several email clients to resolve email addresses and lookup certificates for s/mime. Moz interacts with it reasonably well. Note that directory.verisign.com hosts only certificates rooted in VeriSign's Public CA hierarchies. It does not publish Thawte hierarchies nor our Managed PKI customer's hierarchies if they are privately rooted. The directory has behavioral quirks and limitations to better support the various client behaviors as well as conform to the Practices and Policies we operate under as a CA and as a business. have fun! ram
smime.p7s
Description: application/pkcs7-signature
