1794858 - Add CA task list item for Root CA Certificates missing Full CRL

Status: RESOLVED FIXED

(CA Program :: Common CA Database, task)

Description

[Clint]

Steps to reproduce:

In order to assist CAs with successful adherence to member Store policies, we could/should add a CA Task List report which discloses which Root CAs operated by a given CA Owner have not had their respective "Pertaining to Certificates Issued by This CA" section populated.

Comment 1

[Kathleen Wilson]

Clint, is the following correct?

Apple is the only root store currently requiring the full CRL fields to be filled in on root certificates.

Name of new CA Task List report: Root Certificates with missing Full CRL

Description / Filter:
This report shows Root Certificates which satisfy all conditions below:
Root Certificate is Included in Apple's Root Store
Root Certificate is not Expired
Full CRL Issued By This CA is blank
JSON Array of Partitioned CRLs is blank

Columns:
Certificate Name (clickable link)
Status of Root Certificate
Apple Trust Bits

Comment 2

[Clint]

Yes, that's correct. The Description/Filter and columns also look complete to me.

Comment 3

[Poonam Bhargava]

"Root Certificates with missing Full CRL" section has been added to "CA Task List" report in production. Please check using internal user login as well as CA login.

Comment 4

[Kathleen Wilson]

Verified in production. Thanks!