3 ms·
This is actually solid grounds for removal in all trust stores, honestly. They did numerous things wrong (from what I am reading here): - The CA must have had
by iancarroll 12y ago
This is actually solid grounds for removal in all trust stores, honestly. They did numerous things wrong (from what I am reading here):
- The CA must have had some warning that it wasn't being loaded onto a HSM
- It was never verified the CSR/key was generated on a HSM (!!!)
- The auditors did not oversee the key being generated (this is typical for roots, although not for intermediaries)
- If this subordinate was in operation for >1yr, how was this not caught in an audit?
and you can't load a certificate off of a HSM, so I'd argue the CA is entirely at fault here.
- yuhong 12y agoThe fourth point is not true, I looked at the intermediate myself. In fact the test intermediate is only days old at the time of the writing and last less than a month before it expires.