Open Bug 2082408 Opened 7 days ago Updated 7 days ago

eMudhra emSign PKI Services: TLS certificates exceed CP/CPS maximum validity period by one second

Categories

(CA Program :: CA Certificate Compliance, task)

Product:
CA Program
Component:
CA Certificate Compliance
Type:
task

Tracking

(Not tracked)

Status:
ASSIGNED

People

(Reporter: naveen.ml, Assigned: naveen.ml)

Details

(Whiteboard: [ca-compliance] [__-misissuance])

Preliminary Incident Report

Summary

  • Incident description: eMudhra issued TLS server certificates with a validity period of 90 days and 1 second, exceeding the 90-day maximum in Section 6.3.2 of the emSign SSL/TLS CP/CPS. Details will be provided in the full incident report.

  • Relevant policies: emSign SSL/TLS CP/CPS Section 6.3.2; TLS Baseline Requirements Sections 1.6.1; RFC 5280 Section 4.1.2.5.

  • Source of incident disclosure: Third party reported.

Assignee: nobody → naveen.ml
Whiteboard: [ca-compliance] [__-misissuance]
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
You need to log in before you can comment on or make changes to this bug.