Invalid URLs in "Full CRL Issued By This CA" field

171 views
Skip to first unread message

Andrew Ayer

unread,
Sep 26, 2022, 8:11:41 PM9/26/22
to dev-secur...@mozilla.org
I'm attempting to download the CRLs referenced by the "Full CRL Issued
By This CA" field in CCADB and have noticed a number of invalid or
non-functional URLs. For example:

Un-resolvable hostname:
http://Certera.crl.sectigo.com/CerteraDVSSLCA.crl

URL missing protocol:
lva.at/files/lva_2016.crl

Multiple URLs specified instead of a single URL:
http://qcrldp1.ica.cz/qcw17_rsa.crl, http://qcrldp2.ica.cz/qcw17_rsa.crl, http://qcrldp3.ica.cz/qcw17_rsa.crl

This is just a sample. All CAs should make sure they are
specifying a single, working URL in this field.

Regards,
Andrew

Daniel Zens

unread,
Sep 27, 2022, 3:14:51 AM9/27/22
to dev-secur...@mozilla.org, Andrew Ayer
Hi Andrew,

Thank you,
I have fixed the missing http:// for:
lva.at/files/lva_2016.crl

Best
Daniel
GLOBALTRUST
Reply all
Reply to author
Forward
0 new messages