Certificates with reserved IP addresses

Baseline Requirements section 7.1.4.2.1 prohibits ipAddress SANs from =
containing IANA reserved IP addresses and any certificates containing =
them should have been revoked by 2016-10-01.

There are seven unexpired unrevoked certificates that are known to CT =
and trusted by NSS containing reserved IP addresses.

The full list can be found at: https://misissued.com/batch/7/

DigiCert
    TI Trust Technologies Global CA (5)
    Cybertrust Japan Public CA G2 (1)

PROCERT
    PSCProcert (1)

It=E2=80=99s also worth noting that three of the "TI Trust =
Technologies=E2=80=9D certificates contain dnsNames with internal names, =
which are prohibited under the same BR section.

Jonathan=
0
Jonathan
8/13/2017 1:52:34 AM
mozilla.dev.security.policy 1213 articles. 1 followers. Post Follow

0 Replies
41 Views

Similar Articles

[PageSpeed] 51

Reply: