is pilot/ct still managed?

135 views
Skip to first unread message

zagadeesh

unread,
Sep 1, 2020, 8:32:08 PM9/1/20
to certificate-transparency
don't find pilot root CA "Certificate Transparency CA" roots

zagadeesh

unread,
Sep 1, 2020, 11:35:34 PM9/1/20
to certificate-transparency
don't find pilot root CA "Certificate Transparency CA" in roots (https://ct.googleapis.com/pilot/ct/v1/get-roots  )

Al Cutter

unread,
Sep 2, 2020, 4:41:26 AM9/2/20
to certificate-...@googlegroups.com
Hi Zagadeesh,

The Pilot log had its set of trusted roots reduced earlier in the year (see https://groups.google.com/a/chromium.org/g/ct-policy/c/iOg8Jqc0XxU/m/cFm75-JzBQAJ).

The current set of roots I see on Pilot are below, (perhaps the root you meant was the first one in the list?):
        Subject: C = GB, ST = London, O = Google UK Ltd., OU = Certificate Transparency, CN = Merge Delay Monitor Root
        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA

Hope that helps!

Cheers,
Al.

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/certificate-transparency/115b8ea2-7664-492c-bd16-6397ee8344f3n%40googlegroups.com.

zagadeesh

unread,
Sep 2, 2020, 9:11:15 AM9/2/20
to certificate-transparency
Dear Al,

You are correct, https://ct.googleapis.com/pilot/ct/v1/get-roots giving only those 4 roots.
where can we find precerts for testing precert submission to pilot CT. 
we observed precerts are only signed by  Certificate Transparency CA from git.

Reply all
Reply to author
Forward
0 new messages