Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-12 Thread Kathleen Wilson
Thanks to all of you who reviewed and commented on this request from DocuSign to include the following root certificates, turn on the Websites and Email trust bits for all of them, and enable EV treatment for all of them. + Certplus Root CA G1 - (SHA512, RSA4096) + Certplus Root CA G2 - (SHA384,

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-10 Thread Kathleen Wilson
On Tuesday, May 10, 2016 at 8:30:45 AM UTC-7, Erwann Abalea wrote: > Bonjour, > > Le mardi 10 mai 2016 10:10:49 UTC+2, Kurt Roeckx a écrit : > > On 2016-05-10 02:07, Kathleen Wilson wrote: > > > Thanks to all of you who have reviewed and commented on this request from > > > DocuSign to include th

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-10 Thread Erwann Abalea
Bonjour, Le mardi 10 mai 2016 10:10:49 UTC+2, Kurt Roeckx a écrit : > On 2016-05-10 02:07, Kathleen Wilson wrote: > > Thanks to all of you who have reviewed and commented on this request from > > DocuSign to include the following root certificates, turn on the Websites > > and Email trust bits f

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-10 Thread Nick Lamb
On Tuesday, 10 May 2016 09:10:49 UTC+1, Kurt Roeckx wrote: > It's using a PrintableString with "Hautes-Pyrénées" in it, which is > clearly wrong. A PrintableString has a very limited amount of valid > characters. All their strings are PrintableStrings. They should > probably switch most of t

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-10 Thread Kurt Roeckx
On 2016-05-10 02:07, Kathleen Wilson wrote: Thanks to all of you who have reviewed and commented on this request from DocuSign to include the following root certificates, turn on the Websites and Email trust bits for all of them, and enable EV treatment for all of them. + Certplus Root CA G1 -

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-09 Thread Kathleen Wilson
Thanks to all of you who have reviewed and commented on this request from DocuSign to include the following root certificates, turn on the Websites and Email trust bits for all of them, and enable EV treatment for all of them. + Certplus Root CA G1 - (SHA512, RSA4096) + Certplus Root CA G2 - (SH

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-05-04 Thread Andrew R. Whalley
Thank you Erwann. I have no other questions at this time. On Thu, Apr 28, 2016 at 7:13 AM, Erwann Abalea wrote: > Bonjour, > > Le vendredi 8 avril 2016 01:38:09 UTC+2, awha...@google.com a écrit : > > OpenTrust has requested EV treatment in Chrome, with bug: > https://bugs.chromium.org/p/chromi

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-04-28 Thread Erwann Abalea
Bonjour, Le vendredi 8 avril 2016 01:38:09 UTC+2, awha...@google.com a écrit : > OpenTrust has requested EV treatment in Chrome, with bug: > https://bugs.chromium.org/p/chromium/issues/detail?id=385090 > > As such I've reviewed the "EV SSL CA Certificate Practice Statement" version > 0.8 dated

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-04-04 Thread Erwann Abalea
Bonsoir, Le vendredi 19 février 2016 00:55:02 UTC+1, Charles Reiss a écrit : > On 02/18/16 21:40, Erwann Abalea wrote: > > Bonsoir, > > > > Le mercredi 10 février 2016 00:15:11 UTC+1, Charles Reiss a écrit : > >> On 02/09/16 20:07, Kathleen Wilson wrote: > >>> This request by DocuSign (OpenTrust/

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-04-04 Thread Erwann Abalea
Bonsoir, Le jeudi 18 février 2016 22:42:17 UTC+1, Erwann Abalea a écrit : [...] > > These certificates chain to the 'Certplus Class 2' root and contain a > > trailing space in one of their dNSName SANs: > > > > notBefore in 2016: > > https://crt.sh/?id=12994171&opt=cablint > > notBefore in 2015:

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-18 Thread Charles Reiss
On 02/18/16 21:40, Erwann Abalea wrote: > Bonsoir, > > Le mercredi 10 février 2016 00:15:11 UTC+1, Charles Reiss a écrit : >> On 02/09/16 20:07, Kathleen Wilson wrote: >>> This request by DocuSign (OpenTrust/Keynectis/Certplus) is to >>> include the following root certificates, turn on the Website

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-18 Thread Erwann Abalea
Bonsoir, Le mercredi 17 février 2016 02:11:58 UTC+1, Charles Reiss a écrit : > On 02/09/16 20:07, Kathleen Wilson wrote: > > This request by DocuSign (OpenTrust/Keynectis/Certplus) is to include > > the following root certificates, turn on the Websites and Email trust > > bits for all of them, and

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-18 Thread Erwann Abalea
Bonsoir, Le mercredi 10 février 2016 00:15:11 UTC+1, Charles Reiss a écrit : > On 02/09/16 20:07, Kathleen Wilson wrote: > > This request by DocuSign (OpenTrust/Keynectis/Certplus) is to include > > the following root certificates, turn on the Websites and Email trust > > bits for all of them, and

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-18 Thread Erwann Abalea
Bonjour, Le mardi 9 février 2016 22:41:37 UTC+1, David E. Ross a écrit : > On 2/9/2016 12:07 PM, Kathleen Wilson wrote: > > [snipped] > > > * Audit: Annual audits are performed by LSTI according to the ETSI TS > > 102 042 criteria. > > http://www.lsti-certification.fr/images/liste_entrepr

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-16 Thread Charles Reiss
On 02/09/16 20:07, Kathleen Wilson wrote: > This request by DocuSign (OpenTrust/Keynectis/Certplus) is to include > the following root certificates, turn on the Websites and Email trust > bits for all of them, and enable EV treatment for all of them. These new > certs will eventually replace the ‘C

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-09 Thread Jakob Bohm
Commenting only on a two points, snipping rest. I am not associated with Docusign and this is just some guesswork to help the process along. Obviously someone official will have to directly or indirectly state which of these guesses are correct. On 10/02/2016 00:14, Charles Reiss wrote: Secti

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-09 Thread Charles Reiss
On 02/09/16 20:07, Kathleen Wilson wrote: > This request by DocuSign (OpenTrust/Keynectis/Certplus) is to include > the following root certificates, turn on the Websites and Email trust > bits for all of them, and enable EV treatment for all of them. These new > certs will eventually replace the ‘C

Re: DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-09 Thread David E. Ross
On 2/9/2016 12:07 PM, Kathleen Wilson wrote: [snipped] > * Audit: Annual audits are performed by LSTI according to the ETSI TS > 102 042 criteria. > http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe.pdf > https://bug1025095.bugzilla.mozilla.org/attachment.cgi?id=85903

DocuSign (OpenTrust/Keynectis/Certplus) root renewal request

2016-02-09 Thread Kathleen Wilson
This request by DocuSign (OpenTrust/Keynectis/Certplus) is to include the following root certificates, turn on the Websites and Email trust bits for all of them, and enable EV treatment for all of them. These new certs will eventually replace the ‘Certplus Class 2’ root certificate that was inc