Re: Propose Removal of E-Guven root

2015-03-19 Thread Peter Bowen
On Thu, Mar 19, 2015 at 4:39 PM, David Keeler dkee...@mozilla.com wrote: On 03/19/2015 01:01 PM, Peter Bowen wrote: Given this ratio, I find it very hard to believe that they would be able to receive an audit report without qualifications that Mozilla would deem unacceptable. Maybe I'm

Re: Propose Removal of E-Guven root

2015-03-19 Thread Ryan Sleevi
On Thu, March 19, 2015 4:49 pm, Peter Bowen wrote: For example, based on what you reported and what I saw, the audit report should at a minimum say: E-Guven complies with the Baseline Requirements with the following qualifications: - Some certificates issued do not conform to 9.2.1 -

Re: Propose Removal of E-Guven root

2015-03-19 Thread Peter Gutmann
Matt Palmer mpal...@hezmatt.org writes: On Thu, Mar 19, 2015 at 01:01:32PM -0700, Peter Bowen wrote: In the Pilot CT log, which includes every certificate that the Google crawler has seen, I found 19 unexpired certificates issued by this CA. Their subjects are as follows (using the default

Re: LuxTrust Root Inclusion Request

2015-03-19 Thread Matt Palmer
On Thu, Mar 19, 2015 at 09:35:20AM +0100, LuxTrust CA wrote: Regarding issue #2 : OCSP responds good to a non-issued certificate (serials and 00) (BR Section 13.2.6) : LuxTrust’s OCSP application currently does not support this feature (technical

Re: Second Discussion of KIR S.A. Root Inclusion Request

2015-03-19 Thread Ryan Sleevi
On Tue, March 3, 2015 12:32 pm, Kathleen Wilson wrote: All, I have confirmed that KIR has made the changes listed below to their CPS and CP. CPS: http://www.elektronicznypodpis.pl/files/doc/certification_practice_statement.pdf CP: