Open Bug 2085304 Opened 6 days ago

Disig: keyUsage in OCSP responder certificate not marked critical

Categories

(CA Program :: CA Certificate Compliance, task)

Product:
CA Program
Component:
CA Certificate Compliance
Type:
task

Tracking

(Not tracked)

Status:
UNCONFIRMED

People

(Reporter: jozef.nigut, Unassigned)

Details

Preliminary Incident Report

Summary

  • Incident description: We were notified about non-compliant OCSP responder certificate of CA Disig Root R2 (CCADB record A000095).
    keyUsage extension is not marked critical.
    Further investigation is ongoing.

  • Relevant policies: TLS BR 7.1.2.8.2

  • Source of incident disclosure: Third Party Reported

You need to log in before you can comment on or make changes to this bug.