CCADB Update: PEM Import Tool

Skip to first unread message

Kathleen Wilson

Feb 12, 2024, 1:41:07 PMFeb 12
to CCADB Public

The PEM Import Tool has been updated and re-run on all root and intermediate certificate records in the CCADB. This tool takes a PEM-encoded certificate and outputs JSON containing data from the parsed certificate. The CCADB uses the resulting JSON data to fill in the corresponding fields in the root and intermediate certificate records. This happens when you click on the following buttons: “Add Root Certificate to CCADB”, “New Intermediate Cert”, and “Add/Update PEM Info”.

Summary of the improvements to the PEM Import Tool:

1) It now supports all of the following Subject/Issuer Attributes: CN, OU, O, C, L, ST, streetAddress, postalCode, serialNumber, emailAddress, UID, DC, name, surname, givenName, initials, generationQualifier, title, pseudonym, businessCategory, jurisdictionL, jurisdictionST, jurisdictionC, organizationIdentifier, DNQualifier.   (Previously the tool only supported the CN, OU, O, and C attributes.)

2) The technically-constrained check now matches the current BRs. (Thanks to Rob for updating this part of the tool!)

3) Indicates if the inhibitAnyPolicy extension is present.

Please let us know if you notice any problems arising from these changes.


Kathleen, on behalf of the CCADB Steering Committee

Reply all
Reply to author
0 new messages