1076940 - Add revoked intermediate cert from T-Systems to OneCRL

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kathleen Wilson]

The following intermediate certificate was revoked as part of a planned migration by T-Systems. T-Systems had informed us of this upcoming change in their response to the last CA Communication. 
https://wiki.mozilla.org/CA:Communications#May_2014_Responses


Here follows the information about the revoked certificate to add to OneCRL.

Serial number of the revoked certificate: 61:1d:d8:61:00:00:00:00:00:04

Link to the CRL that contains that serial number:
URL=http://crl.pki.fraunhofer.de/fhg-root-ca-2007.crl
URL=http://crl.fraunhofer-pki.de/fhg-root-ca-2007.crl

notAfter date of the revoked certificate
Not After : Jun 30 23:59:59 2019 GMT

rfc5280 revocation reason code
Serial Number: 611DD861000000000004
Revocation Date: Sep 22 13:00:23 2014 GMT
CRL entry extensions:
  X509v3 CRL Reason Code: Cessation Of Operation

Comment 1

[Kathleen Wilson]

Attachment: Revoked Intermediate Cert

Comment 2

[Bernd]

Please add the revoked intermediate certificate to OneCRL

Serial number:
89:90:11:15:58:3e:87:9b

Link to the CRL:
URL=https://www.telesec.de/de/public-key-infrastruktur/support/root-zertifikate/category/58-deutsche-telekom-root-ca-2?download=358:sperrliste-deutsche-telekom-root-ca-2

Not After Date: 
Jul 9 23:59:00 2019 GMT

Revocation Date: 
Feb 04 14:47:35 2016 GMT

CRL entry extensions:
  X509v3 CRL Reason Code: (4) superseded

Comment 3

[Bernd]

Attachment: Revoked Intermediate Cert

Comment 4

[Kathleen Wilson]

(In reply to Kathleen Wilson from comment #0)
> The following intermediate certificate was revoked as part of a planned
> migration by T-Systems. T-Systems had informed us of this upcoming change in
> their response to the last CA Communication. 
> https://wiki.mozilla.org/CA:Communications#May_2014_Responses
> 
> 
> Here follows the information about the revoked certificate to add to OneCRL.
> 
> Serial number of the revoked certificate: 61:1d:d8:61:00:00:00:00:00:04
> 
> Link to the CRL that contains that serial number:
> URL=http://crl.pki.fraunhofer.de/fhg-root-ca-2007.crl
> URL=http://crl.fraunhofer-pki.de/fhg-root-ca-2007.crl
> 
> notAfter date of the revoked certificate
> Not After : Jun 30 23:59:59 2019 GMT
> 
> rfc5280 revocation reason code
> Serial Number: 611DD861000000000004
> Revocation Date: Sep 22 13:00:23 2014 GMT
> CRL entry extensions:
>   X509v3 CRL Reason Code: Cessation Of Operation

This has been added to OneCRL.

Comment 5

[Kathleen Wilson]

(In reply to Bernd from comment #2)
> Please add the revoked intermediate certificate to OneCRL
> 
> Serial number:
> 89:90:11:15:58:3e:87:9b
> 
> Link to the CRL:
> URL=https://www.telesec.de/de/public-key-infrastruktur/support/root-
> zertifikate/category/58-deutsche-telekom-root-ca-2?download=358:sperrliste-
> deutsche-telekom-root-ca-2
> 
> Not After Date: 
> Jul 9 23:59:00 2019 GMT
> 
> Revocation Date: 
> Feb 04 14:47:35 2016 GMT
> 
> CRL entry extensions:
>   X509v3 CRL Reason Code: (4) superseded

This has also been added to OneCRL.