CCADB Update: PEM Import Tool

[Kathleen Wilson]

All,

The PEM Import Tool has been updated and re-run on all root and intermediate certificate records in the CCADB. This tool takes a PEM-encoded certificate and outputs JSON containing data from the parsed certificate. The CCADB uses the resulting JSON data to fill in the corresponding fields in the root and intermediate certificate records. This happens when you click on the following buttons: “Add Root Certificate to CCADB”, “New Intermediate Cert”, and “Add/Update PEM Info”.

Summary of the improvements to the PEM Import Tool:

1) It now supports all of the following Subject/Issuer Attributes: CN, OU, O, C, L, ST, streetAddress, postalCode, serialNumber, emailAddress, UID, DC, name, surname, givenName, initials, generationQualifier, title, pseudonym, businessCategory, jurisdictionL, jurisdictionST, jurisdictionC, organizationIdentifier, DNQualifier.   (Previously the tool only supported the CN, OU, O, and C attributes.)

2) The technically-constrained check now matches the current BRs. (Thanks to Rob for updating this part of the tool!)

3) Indicates if the inhibitAnyPolicy extension is present.

Please let us know if you notice any problems arising from these changes.

Thanks,

Kathleen, on behalf of the CCADB Steering Committee