Certificate OID policy and new intermediate CA mode

2015-07-20 Thread cfcazhaogaixia
These are samples of the end-entity certificates OIDs OV 2.23.140.1.2.2 EV 2.23.140.1.1 EV CodeSign 2.23.140.1.3 Non-EV Code Signing 2.23.140.1.4 Microsoft mentioned: Microsoft does not require CAs to separate out intermediates by OID type; instead, the intent of this requirement is to simply r

Re: Second Discussion of CFCA Root Inclusion Request

2015-01-23 Thread cfcazhaogaixia
在 2015年1月23日星期五 UTC+8上午12:20:38,Erwann Abalea写道: > Le mercredi 7 janvier 2015 22:25:00 UTC+1, Kathleen Wilson a écrit : > > China Financial Certification Authority (CFCA) has applied to include > > the "CFCA EV ROOT" root certificate, turn on the websites trust bit, and > > enable EV treatment. >

Re: Second Discussion of CFCA Root Inclusion Request

2015-01-08 Thread cfcazhaogaixia
I'm CFCA's representative Zhao GaiXia and this is the officially respond account(using google groups). Thanks for your reply! CFCA do not have limits relate to TLDs in SSL certificates, as is listed above http://www.cfca.com.cn/file/CFCA-1403-CPS-en.rar " ** CPS section 3.2.2.4: Applications f

Re: CFCA Root Inclusion Request

2014-07-15 Thread cfcazhaogaixia
This is our reply for GT system For GT: 1, No SAN Status: No problem/Fixed This problem is found and fixed in pre-audit stage, but the test certificate is an old one, now is been revoked. As is mentioned in last reply, a Point in Time Pre-Issuance Readiness audit in this April. Since this i

Re: CFCA Root Inclusion Request

2014-07-01 Thread cfcazhaogaixia
Thank you all for your replies. We tested and verified many problems mentioned by Erwann In conclusion the problems mentioned by Erwann are: 1,No SAN in certificate 2,MIME type of AIA URI and CRLDP is test/plain 3,OCSP signer certificate's public key, valid period and extension. 4,root key generat

Re: CFCA Root Inclusion Request

2014-06-25 Thread cfcazhaogaixia
I'm CFCA's representative Zhao GaiXia and this is the officially respond account(using google doc). Thanks for reviewing our request. We will review and verify the points you mentioned and will reply soon. Zhao Gaixia Company Email: gxz...@cfca.com.cn _