1779079 - Add Fields to New Intermediate Certificate

Status: UNCONFIRMED

(CA Program :: Common CA Database, task)

Description

[Chris Clements]

Path: [Homepage -> CA Owners/Certificates -> +New CA Owner/Certificate -> Intermediate Certificate]

Add the following fields to the corresponding (or new) sections of the case.

Other CA Information [Leave empty if same as CA Owner]

(Also, related to https://bugzilla.mozilla.org/show_bug.cgi?id=1772585 ?)

• Is the CA Owner the CA Operator? [drop down: yes/no] (If no, collect CA Operator details:)
  • Company Website [text input]
  • Email Alias 1 [text input]
  • Email Alias 2 [text input]
  • Organizational Type [dropdown: None, Private Corporation, Public Corporation, Government Agency, Non-Profit]
  • Geographic Focus [text input]
  • Primary Market/Customer Base [text input]
  • Address [text inputs for street, city, state, zip, country]

[New section] Key Generation

• Key Generation Date [date picker]
• Key Generation Audit Report Date [date picker, optional]
• Key Generation Audit Report (Link) [text for URL, optional]

Pertaining to Certificates Issued by this CA

• TLS Certificate Domain Validation Methods in Use [selection boxes with values, below]:
  • N/A - non-TLS CA
  • 3.2.2.4.2 Email, Fax, SMS, or Postal Mail to Domain Contact
  • 3.2.2.4.4 Constructed Email to Domain Contact
  • 3.2.2.4.7 DNS Change
  • 3.2.2.4.8 IP Address
  • 3.2.2.4.12 Validating Applicant as a Domain Contact
  • 3.2.2.4.13 Email to DNS CAA Contact
  • 3.2.2.4.14 Email to DNS TXT Contact
  • 3.2.2.4.15 Phone Contact with Domain Contact
  • 3.2.2.4.16 Phone Contact with DNS TXT Record Phone Contact
  • 3.2.2.4.17 Phone Contact with DNS CAA Phone Contact
  • 3.2.2.4.18 Agreed-Upon Change to Website v2
  • 3.2.2.4.19 Agreed-Upon Change to Website - ACME
  • 3.2.2.4.20 TLS Using ALPN

Comment 2

[Chris Clements]

For consideration; when adding the TLS Certificate Domain Validation Methods in Use selection to the ICA Record we could write these values to the PKI Hierarchy section of the Root Record and remove the selection of these values from the ROOT INFORMATION tab in the Add/Update Root Request case.