1276641 - Revoke Experian CA intermediate CA certificate

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task)

Description

[Bruce Morton]

Attachment: Experian_Xcert.cer

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

Steps to reproduce:

Entrust has revoked the intermediate certificate to the Experian CA.


Actual results:

Revocation is complete and serial number is on the CRL and revoked status is provided by OCSP.
CRL - http://crl.entrust.net/2048ca.crl
OCSP - http://ocsp.entrust.net
Reason - Superceded


Expected results:

Certificate should be added to OneCRL. Please note that the Experian CA may still continue to issue new certificates.

Comment 1

[Kathleen Wilson]

Bruce, I can't seem to get the values out of the attached Experian_Xcert.cer file in order to determine if it has been added to OneCRL. Is there a record for this cert in the Common CA Database? 
Please provide the SHA-1 Fingerprint for this cert, so I can try to track down the PEM data for it.

Comment 2

[Bruce Morton]

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[Bruce Morton]

The certificate is here in salesforce, https://mozillacacommunity.force.com/001o000000p33rCAAQ

Comment 4

[Kathleen Wilson]

Thanks, Bruce. I confirm that this has been added to OneCRL.