New issue
Advanced search Search tips

Issue 855175 link

Starred by 3 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Task



Sign in to add a comment

Request for EV SSL Treatment for SSL.com EV Roots

Reported by leo.grov...@gmail.com, Jun 21 2018

Issue description

Chrome Version       : all
This is a request to enable EV treatment for the following CAs:
- CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US
 * SHA1 fingerprint: 74:3A:F0:52:9B:D0:32:A0:F4:4A:83:CD:D4:BA:A9:7B:7C:2E:C4:9A
 * SHA256 fingerprint: 2E:7B:F1:6C:C2:24:85:A7:BB:E2:AA:86:96:75:07:61:B0:AE:39:BE:3B:2F:E9:D0:CC:6D:4E:F7:34:91:42:5C
- CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US
 * SHA1 fingerprint: 4C:DD:51:A3:D1:F5:20:32:14:B0:C6:C5:32:23:03:91:C7:46:42:6D
 * SHA256 fingerprint: 22:A2:C1:F7:BD:ED:70:4C:C1:E7:01:B5:F4:08:C3:10:88:0F:E9:56:B5:DE:2A:4A:44:F9:9C:87:3A:25:A7:C8

Both roots are currently included in the Microsoft and Mozilla trust stores and have EV treatment.

Our WebTrust audits can be found at:
a. WebTrust for CAs: https://www.ssl.com/app/uploads/2017/07/SSL-COM-WTCA-Indp-Accountant-Report-and-Mgmt-Assertion-FINAL-2017.pdf?
b. WebTrust SSL Baseline with Network Security: https://www.ssl.com/app/uploads/2017/07/SSL-COM-WTBR-Indp-Accountant-Report-and-Mgmt-Assertion-FINAL-2017.pdf
c. WebTrust Extended Validation SSL: https://www.ssl.com/app/uploads/2017/07/SSL-COM-WT-SSL-EV-Indp-Accountant-Report-and-Mgmt-Assertion-FINAL-2017.pdf?

The CAB Forum Policy OID, i.e. 2.23.140.1.1, is used to identify EV certificates.

Test certificates can be found at:
* https://test-ev-rsa.ssl.com/
* https://test-ev-ecc.ssl.com/

Thank you in advance.
 
Components: Internals>Network>Certificate

Comment 2 by och...@chromium.org, Jun 22 2018

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Cc: asymmetric@chromium.org rsleevi@chromium.org
Components: -Internals>Network>Certificate Internals>Network>EV
Labels: -Type-Bug Pri-3 Type-Task
Status: Available (was: Unconfirmed)
Hello, can we please get an update on the EV SSL treatment status? Thank you for your time on this.
Hello Everyone, I hope you are off to a great 2019! I kindly request an update on the EV treatment application for SSL.com. If there is anything you require on our end, please do not hesitate to let me know. Thank you.

Regards,

Leo

Sign in to add a comment