Add revoked intermediate certificates from FNMT to OneCRL

RESOLVED FIXED

Status

NSS
CA Certificates Code
RESOLVED FIXED
a year ago
5 months ago

People

(Reporter: Rafa Medina, Unassigned)

Tracking

Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(6 attachments)

(Reporter)

Description

a year ago
Created attachment 8740443 [details]
revokedSubCA serialNumber 04

- Revocation reason is "cessationOfOperation" (rfc5280 code: 5) in all cases.
- Serial number of the revoked certificates: 04,05,06,10,11,12
- Link to the OCSP response for intermediated certs: http://ocspfnmtrcmca.cert.fnmt.es/ocspfnmtrcmca/OcspResponderthat serial number
- Link to the CRL that contains that serial number: http://www.cert.fnmt.es/crls/ARLFNMTRCM.crl
(Reporter)

Comment 1

a year ago
Created attachment 8740444 [details]
revokedSubCA serialNumber 05
(Reporter)

Comment 2

a year ago
Created attachment 8740445 [details]
revokedSubCA serialNumber 06
(Reporter)

Comment 3

a year ago
Created attachment 8740446 [details]
revokedSubCA serialNumber 10
(Reporter)

Comment 4

a year ago
Created attachment 8740447 [details]
revokedSubCA serialNumber 11
(Reporter)

Comment 5

a year ago
Created attachment 8740448 [details]
revokedSubCA serialNumber 12
(Reporter)

Updated

a year ago
Blocks: 435736

Updated

a year ago
Blocks: 1155095
OS: Unspecified → All
Hardware: Unspecified → All
Version: 4.0 → trunk

Updated

10 months ago
Depends on: 1289808

Comment 6

10 months ago
Summary of the six intermediate certs (attached) to be added to OneCRL before the FNMT root can be included:

subject: C=ES, O=FNMT-RCM, OU=AC APE
  sha1 hash: 8A:8E:8D:48:BC:44:F7:9D:80:67:F8:0F:14:1E:C5:A0:A9:97:99:D5
  sha256 hash: FD:01:90:1F:E7:C4:F5:14:D6:36:DF:64:C0:74:4A:A4:02:9D:B9:16:A3:6F:28:47:4C:84:0E:68:07:93:6A:1E
subject: C=ES, O=FNMT-RCM, OU=AC APE
  sha1 hash: 24:F1:1E:3F:73:DE:D8:92:D4:F0:E3:3B:8A:8F:5A:A5:21:88:A3:C2
  sha256 hash: 0D:4C:32:4B:B0:B0:08:F4:5E:EC:73:8B:8E:51:B3:7D:25:0F:76:F0:5F:6A:0C:30:13:66:10:20:A2:07:25:65
subject: C=ES, O=FNMT-RCM, CN=ISA CA
  sha1 hash: 5E:7F:EE:F9:4C:1F:C5:C6:A2:34:46:8C:89:6B:5D:BA:CA:05:97:69
  sha256 hash: 05:2B:EB:BD:CD:5C:84:7B:FA:0F:6F:B0:EA:22:46:B5:5B:A9:EE:55:E0:2A:2D:48:0B:87:FC:2F:34:2C:84:43
subject: C=ES, O=FNMT-RCM, OU=AC APE
  sha1 hash: 35:EC:75:F8:81:25:03:39:D1:52:5F:EB:0E:23:44:BC:DE:7A:5A:5C
  sha256 hash: C0:81:EA:C7:B9:80:7B:70:BD:DC:AC:13:1F:07:B6:67:E4:D9:DE:7F:56:8C:43:BA:01:11:13:A1:E7:53:48:99
subject: C=ES, O=FNMT-RCM, CN=EU ISA CA
  sha1 hash: 7C:C6:1C:DE:A5:7E:02:6E:2D:A5:C3:C7:66:01:39:A6:6E:AC:80:DE
  sha256 hash: BF:1C:7E:BA:A0:AC:08:9C:16:DD:C7:EA:03:88:D8:3F:47:21:DD:86:2F:E8:71:5E:19:BA:07:82:AE:D1:46:FE
subject: C=ES, O=FNMT-RCM, CN=EU ISA CA
  sha1 hash: B5:CF:1B:22:8A:1A:A3:93:84:3A:C8:02:AB:F9:58:A1:A5:5F:DF:ED
  sha256 hash: 69:9C:E8:E2:05:65:1E:F4:8B:03:85:33:15:AE:48:2C:A0:4B:F2:B3:E2:D9:B5:A5:EF:08:E8:CB:13:86:9B:B6

Comment 7

7 months ago
These have all been added to the CA Community in Salesforce, and marked as Revoked and "Ready To Add" to OneCRL.

Comment 8

5 months ago
These have all been added to OneCRL.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 5 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.