1014264 - Disclosure of new GoDaddy Code Signing Subordinate CAs

Status: RESOLVED WORKSFORME

(CA Program :: CA Certificate Root Program, task)

Description

[Wayne Thayer (old account)]

Attachment: GoDaddy Code Signing Sub CAs.zip

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36

Steps to reproduce:

GoDaddy recently issued two new subordinate CAs to be used in a hierarchy specific to code signing. These are not yet listed in our repository at https://certs.godaddy.com/repository


Actual results:

The May 2014 CA communication requests that CAs disclose all non-technically constrained subordinate CAs.


Expected results:

These two new sub CAs are attached to this bug. They are covered under GoDaddy's CPS and audits.

Comment 1

[Kathleen Wilson]

Closing this bug as resolved, but this bug will continue to be used to provide information about GoDaddy's publicly disclosed and audited subordinate CAs that are not listed on their website (https://certs.godaddy.com/repository)

This is in regards to item #10 of 
http://www.mozilla.org/about/governance/policies/security-group/certs/policy/inclusion/

Thanks!

Comment 2

[Wayne Thayer (old account)]

Attachment: G2 EV Code Signing Intermediates.zip

Comment 3

[Wayne Thayer (old account)]

We recently issued 2 additional intermediate certificates for the purpose of issuing EV Code Signing certificates. I've attached them here. They will be added to our repository and CPS.