These are samples of the end-entity certificates OIDs
OV 2.23.140.1.2.2
EV 2.23.140.1.1
EV CodeSign 2.23.140.1.3
Non-EV Code Signing 2.23.140.1.4
Microsoft mentioned:
Microsoft does not require CAs to separate out intermediates by OID type;
instead, the intent of this requirement is to simply r
在 2015年1月23日星期五 UTC+8上午12:20:38,Erwann Abalea写道:
> Le mercredi 7 janvier 2015 22:25:00 UTC+1, Kathleen Wilson a écrit :
> > China Financial Certification Authority (CFCA) has applied to include
> > the "CFCA EV ROOT" root certificate, turn on the websites trust bit, and
> > enable EV treatment.
>
I'm CFCA's representative Zhao GaiXia and this is the officially respond
account(using google groups).
Thanks for your reply!
CFCA do not have limits relate to TLDs in SSL certificates, as is listed above
http://www.cfca.com.cn/file/CFCA-1403-CPS-en.rar
"
** CPS section 3.2.2.4: Applications f
This is our reply for GT system
For GT:
1, No SAN
Status:
No problem/Fixed
This problem is found and fixed in pre-audit stage, but the test certificate is
an old one, now is been revoked.
As is mentioned in last reply, a Point in Time Pre-Issuance Readiness audit in
this April. Since this i
Thank you all for your replies.
We tested and verified many problems mentioned by Erwann
In conclusion the problems mentioned by Erwann are:
1,No SAN in certificate
2,MIME type of AIA URI and CRLDP is test/plain
3,OCSP signer certificate's public key, valid period and extension.
4,root key generat
I'm CFCA's representative Zhao GaiXia and this is the officially respond
account(using google doc).
Thanks for reviewing our request.
We will review and verify the points you mentioned and will reply soon.
Zhao Gaixia
Company Email:
gxz...@cfca.com.cn
_
6 matches
Mail list logo