Revoke Experian CA intermediate CA certificate

RESOLVED FIXED

Status

NSS
CA Certificate Root Program
RESOLVED FIXED
2 years ago
10 months ago

People

(Reporter: Bruce Morton, Assigned: Kathleen Wilson)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

1.85 KB, application/x-x509-ca-cert
Details
(Reporter)

Description

2 years ago
Created attachment 8757907 [details]
Experian_Xcert.cer

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

Steps to reproduce:

Entrust has revoked the intermediate certificate to the Experian CA.


Actual results:

Revocation is complete and serial number is on the CRL and revoked status is provided by OCSP.
CRL - http://crl.entrust.net/2048ca.crl
OCSP - http://ocsp.entrust.net
Reason - Superceded


Expected results:

Certificate should be added to OneCRL. Please note that the Experian CA may still continue to issue new certificates.
(Assignee)

Updated

a year ago
Assignee: nobody → kwilson
Blocks: 1155095
Component: CA Certificates → CA Certificates
Product: NSS → mozilla.org
Version: 4.0 → other
(Assignee)

Comment 1

a year ago
Bruce, I can't seem to get the values out of the attached Experian_Xcert.cer file in order to determine if it has been added to OneCRL. Is there a record for this cert in the Common CA Database? 
Please provide the SHA-1 Fingerprint for this cert, so I can try to track down the PEM data for it.
(Reporter)

Comment 2

a year ago
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
(Reporter)

Comment 3

a year ago
The certificate is here in salesforce, https://mozillacacommunity.force.com/001o000000p33rCAAQ
(Assignee)

Comment 4

a year ago
Thanks, Bruce. I confirm that this has been added to OneCRL.
Status: UNCONFIRMED → RESOLVED
Last Resolved: a year ago
Resolution: --- → FIXED

Updated

10 months ago
Product: mozilla.org → NSS
You need to log in before you can comment on or make changes to this bug.