1320943 - Add revoked certificate Certification Authority of WoSign G2 issued by Certum CA root to OneCRL

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task)

Description

[Arkadiusz Ławniczak]

Attachment: Certification Authority of WoSign G2.zip

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36

Steps to reproduce:

Based on the information from our E&Y External Auditors (WebTrust) WoSign CA Limited has lost its WebTrust seal which has been applied to its roots: 
Certification Authority of WoSign CA 沃通根证书, CA WoSign ECC Root and Certification Authority of WoSign G2.


Actual results:

Certum revoked subordinate CAs issued to Certification Authority of WoSign G2. The revoked CAs are posted to our public CRL at http://crl.certum.pl/ca.crl
The CRL contains two entries for this event.
These revocations have been marked at Mozilla Salesforce.


Expected results:

Please update OneCRL

Comment 1

[Kathleen Wilson]

Certificate 1:
Certificate Issuer Common Name: Certum CA
Certificate Issuer Organization: Unizeto Sp. z o.o.
Certificate Serial Number: 7bbc12a55c668004b9fe2a0b8b688120
CRL URL: http://wosign.repository.certum.eu/certumca.crl

Certificate 2:
Certificate Issuer Common Name: Certum CA
Certificate Issuer Organization: Unizeto Sp. z o.o.
Certificate Serial Number: 00bc726666ff58bff002e5223cae682bf8
CRL URL: http://wosign.crl.certum.eu/certumca.crl

Comment 2

[Kathleen Wilson]

Arkadiusz, Please fix the CRLs as soon as possible, and update this bug when done...

http://wosign.repository.certum.eu/certumca.crl
404 Not Found

http://wosign.crl.certum.eu/certumca.crl
Server not found

Comment 3

[Arkadiusz Ławniczak]

Resolved. It works.

Comment 4

[Kathleen Wilson]

I confirmed that both CRL URLs work now, and contain the entries for these revoked certs.
I have indicated that these are "Ready to Add" to OneCRL in the Common CA Database (Salesforce).

Mark, please add these to OneCRL.

Comment 5

[Kathleen Wilson]

These have been added to OneCRL.

All future revocations of intermediate certs should be reported as described here:
https://wiki.mozilla.org/CA:SalesforceCommunity#Add_Revoked_Intermediate_Certificate_Data_to_Salesforce

Thanks!