1757656 - Remove Expired CA Certificates from PublicAllIntermediateCerts

Status: RESOLVED FIXED

(CA Program :: Common CA Database, task)

Description

[Ben Wilson]

In the report "PublicAllIntermediateCerts" (https://ccadb-public.secure.force.com/mozilla/PublicAllIntermediateCerts), we should filter out expired certificates.
Currently, the report filters records on ...
Revocation Status = Not Revoked
AND
Root Status = 'Included'/'Change Requested'
AND
AND Technically Constrained = False
Thanks!

Comment 1

[Kathleen Wilson]

For consistency, please also add the expired-cert filter to the other reports in the same section here
https://wiki.mozilla.org/CA/Intermediate_Certificates

And then, Ben, please update the text on that wiki page to match.

Comment 2

[Poonam Bhargava]

Below reports use a common controller class. It has been updated to exclude expired certs.

Intermediate CA Certificates (HTML)
Intermediate CA Certificates (CSV)
Intermediate CA Certificates (CSV with PEM of raw certificate data)

The reports below have the logic to filter out expired certs.
Non-revoked, non-expired Intermediate CA Certificates chaining up to roots in Mozilla's program with the Websites trust bit set (CSV with PEM of raw certificate data)
Intermediate CA Certificates with their own audit statements (HTML)
Intermediate CA Certificates with their own audit statements (CSV)

Comment 3

[Kathleen Wilson]

Thanks!