is pilot/ct still managed?

[zagadeesh]

don't find pilot root CA "Certificate Transparency CA" roots

https://ct.googleapis.com/pilot/ct/v1/get-roots  

[zagadeesh]

don't find pilot root CA "Certificate Transparency CA" in roots (https://ct.googleapis.com/pilot/ct/v1/get-roots  )

[Al Cutter]

Hi Zagadeesh,

The Pilot log had its set of trusted roots reduced earlier in the year (see https://groups.google.com/a/chromium.org/g/ct-policy/c/iOg8Jqc0XxU/m/cFm75-JzBQAJ).

The current set of roots I see on Pilot are below, (perhaps the root you meant was the first one in the list?):

        Subject: C = GB, ST = London, O = Google UK Ltd., OU = Certificate Transparency, CN = Merge Delay Monitor Root
        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA

Hope that helps!

Cheers,

Al.

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/certificate-transparency/115b8ea2-7664-492c-bd16-6397ee8344f3n%40googlegroups.com.

[zagadeesh]

Dear Al,

You are correct, https://ct.googleapis.com/pilot/ct/v1/get-roots giving only those 4 roots.

where can we find precerts for testing precert submission to pilot CT. 

we observed precerts are only signed by  Certificate Transparency CA from git.

 (ref: https://github.com/google/certificate-transparency-java)