Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID root certs
Categories
(NSS :: CA Certificates Code, enhancement, P1)
Tracking
(Not tracked)
People
(Reporter: kathleen.a.wilson, Assigned: beurdouche)
References
Details
Attachments
(1 file)
Please set CKA_NSS_SERVER_DISTRUST_AFTER to the specified dates for the following root certificates. This distrusts TLS certs that have “Valid From” newer than the specified date. TLS certificates issued prior to this date will continue to be trusted until the certificate’s natural expiration or until we disable the trust bit or remove the root.
-
Server Distrust After Date: 12/28/2019
Subject: CN=EC-ACC; OU=Serveis Publics de Certificacio, Vegeu https://www.catcert.net/verarrel (c)03, Jerarquia Entitats de Certificacio Catalanes; O=Agencia Catalana de Certificacio (NIF Q-0801176-I); C=ES
Certificate Serial Number: EE2B3DEBD421DE14A862AC04F3DDC401
SHA-1 Fingerprint: 28903A635B5280FAE6774C0B6DA7D6BAA64AF2E8
SHA-256 Fingerprint: 88497F01602F3154246AE28C4D5AEF10F1D87EBB76626F4AE0B7F95BA7968799
Reference: Bug #1496616#c21 -
Server Distrust After Date: 9/19/2019
Subject: O=Government Root Certification Authority; C=TW
Certificate Serial Number: 1F9D595AD72FC20644A5800869E35EF6
SHA-1 Fingerprint: F48B11BFDEABBE94542071E641DE6BBE882B40B9
SHA-256 Fingerprint: 7600295EEFE85B9E1FD624DB76062AAAAE59818A54D2774CD4C0B2C01131E1B3
Reference: Bug #1463975#c24 -
Server Distrust After Date: 9/1/2017
Subject: CN=EE Certification Centre Root CA; O=AS Sertifitseerimiskeskus; C=EE
Certificate Serial Number: 5480F9A073ED3F004CCA89D8E371E64A
SHA-1 Fingerprint: C9A8B9E755805E58E35377A725EBAFC37B27CCD7
SHA-256 Fingerprint: 3E84BA4342908516E77573C0992F0979CA084E4685681FF195CCBA8A229B8A76
Reference: The Server CP states that issuance of the certificates is terminated as of 1. September 2017.
|
Assignee | |
Updated•5 years ago
|
|
|
Assignee | |
Comment 1•5 years ago
|
||
|
||
Comment 2•5 years ago
|
||
Description
•