New issue
Advanced search Search tips

Issue 888511 link

Starred by 1 user

Issue metadata

Status: Unconfirmed
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug



Sign in to add a comment

Network Solutions LLC - New Root ECC and RSA - EV Enabled

Reported by jeannie....@web.com, Sep 24

Issue description

name of your CA : Web.com, Network Solutions.com

EV enabled, trust bits disabled (no code signing will be required for these new roots)

The fingerprint of your EV root (includes two new roots ECC and RSA)

ECC SHA-1 Fingerprint	
80F95B741C38399495C34F20C23E7336314D3C6B

ECC SHA-256 Fingerprint	
2193CFEA381211A1AEAA2DE984E630643A87160B1208118145EAFB8E1BC69958

----------------------------------------------------------------------------
RSA SHA-1 Fingerprint	
8E928C0FC27BB7ABA34E6BC0CA1250CB57B60F84

RSA SHA-256 Fingerprint	
DDBF149733BC2BF8A09D7F012B01A6DEA11D7BAE26713783EF6407A2495BF189


The OID you use to issue EV certs - (See attached PEM files)

A link to your WebTrust for CAs 
EV SSL Audit Statement (Link)	
https://bug1321015.bmoattachments.org/attachment.cgi?id=8996068
BR Audit Statement (Link)
https://bug1321015.bmoattachments.org/attachment.cgi?id=8996069

and a link to a server hosting a test or real certificate issued from this root:

Test Website - Valid	
https://netsolencryption.com/	

Test Website - Revoked	
https://ecc-revoked-ns-cert.com/
 	 
Test Website - Expired	
https://ecc-expired-ns-cert.com/
-------------------------------------------------------------------------
Test Website - Valid	
https://www.rsa-valid-ns-cert.com/
	
Test Website - Revoked	
https://www.rsa-revoked-ns-cert.com/
 	 
Test Website - Expired	
https://www.rsa-expired-ns-cert.com/

Please note that these new root certificates have been accepted by Microsoft in their directory as of December 2017. 

For questions, please outreach to Jeannie.Rissman@web.com

thank you. 
 
NetworkSolutions_PEMfiles.zip
2.5 KB Download
NetSolRSAandECCSubCAs.zip
8.6 KB Download
CCADB_Case_Approved_Network Solutions.JPG
54.6 KB View Download
Components: Internals>Network>Certificate
Status: Unconfirmed (was: New)
Components: -Internals>Network>Certificate Internals>Network>EV
Labels: Needs-Milestone
Cc: phanindra.mandapaka@chromium.org
Labels: Triaged-ET TE-NeedsTriageHelp
Thanks for filing the issue!

As per comment# 0 steps to reproduce the problem, issue seems to be related to Network Solutions LLC which is out of scope for TE to triage it, hence adding TE-NeedsTriageHelp label and requesting someone from the Network team to have a look at this issue.

Thanks!
Chromium,

It appears that you have a concern with our submission of the new ECC and RSA roots, that it is missing a milestone? Can you please advise what your specific modifications are required and then I can determine what team(s) will need to address.

Thank you.


Jeannie Rissman
Security Product Manager
12808 Gran Bay Parkway, West  |  Jacksonville, FL 32258
Direct: 904.680.6973 | jeannie.rissman@web.com<mailto:jeannie.rissman@web.com>
[small_web]

From: phanindr… via monorail [mailto:monorail+v2.3982175106@chromium.org]
Sent: Wednesday, October 17, 2018 4:17 AM
To: Jeannie Rissman
Subject: Issue 888511 in chromium: Network Solutions LLC - New Root ECC and RSA - EV Enabled
Labels: Pri-2
Issue has a component, but no priority. Updating to have default priority (Pri-2)

Sign in to add a comment