1733229 - Indicate expired certificates in the CA hierarchy view

Status: NEW

(CA Program :: Common CA Database, task)

Description

[Kathleen Wilson]

In the CA Hierarchy view the CCADB indicates the revoked certificates via a red "X" in front of the certificate name and "[Revoked]" at the end of the row.

Please also add an indicator for when a certificate is expired. e.g. add a red "X" in front of the certificate name and "[Expired]" at the end of the row.

Note that a certificate can be both revoked and expired, so it is possible that a row will have "[Expired][Revoked]" at the end of it.

Comment 1

[Bruce Morton]

It would also be good if the view if the revoked/expired CA certificates could be optionally removed from the display. This will make it easier for CAs and reviewers to focus on updating/reviewing active CA certifiates.

Comment 2

[pekka.lahtiharju]

I endorse this improvement. In Telia we see it irritating that irrelevant expired CA rows ruin the CA visibility.

Comment 3

[Dustin Hollenback]

I agree as well. These would be very helpful visual improvements. Personally, I rarely need to see expired or revoked CAs and they make it harder to parse for the active CAs that I more commonly need to find.

Comment 4

[Ryan Dickson]

+1 to this enhancement (on behalf of the Chrome Root Program)