1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

Please set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER to 6/30/2024 for the GLOBALTRUST 2020 root CA certificate, which will distrust TLS and S/MIME certificates that have “Valid From” date newer than the specified date. Certificates issued prior to this date will continue to be trusted until the certificate’s natural expiration or until we disable the trust bit or remove the root.
Here are the certificate details:
https://crt.sh/?q=9A296A5182D1D451A2E37F439B74DAAFA267523329F90F9A0D2007C334E23C9A
Subject
CN=GLOBALTRUST 2020; O=e-commerce monitoring GmbH; C=AT
Issuer
CN=GLOBALTRUST 2020; O=e-commerce monitoring GmbH; C=AT
Valid From (GMT)
2/10/2020
Valid To (GMT)
6/10/2040
Certificate Serial Number
5A4BBD5AFB4F8A5BFA65E5
SHA-1 Fingerprint
D067C11351010CAAD0C76A65373116264F5371A2
SHA-256 Fingerprint
9A296A5182D1D451A2E37F439B74DAAFA267523329F90F9A0D2007C334E23C9A
Subject Key Identifier
3C4f0WE3eeSr1dWzEnFoPWponCI=
Authority Key Identifier
3C4f0WE3eeSr1dWzEnFoPWponCI=
SPKI SHA256
FEE8AF929175687F4638A3FC983DB8ECD0E5E2A83E737F3FB77B4C22FCBAC0A6
Subject + SPKI SHA256
6645D5A90FC9FF5001D0F90540C209D6D53F1666F540DEB53BF12D8FC0204A14

Comment 1

[Anna Weine]

Attachment: Bug 1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME

Comment 2

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/e864b9300978a92ea817cb704e05b17f96be64cc