LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Joseph
> L. Kaiser said:
> All expirations are in May 2005 at the earliest.....
Looking on my UI I see:
Certificate Revocation List (CRL):
Version 1 (0x0)
Signature Algorithm: sha1WithRSAEncryption
Issuer: /O=DOE Science Grid/OU=Certificate
Authorities/CN=Certificate Manager
Last Update: Feb 6 00:23:03 2004 GMT
Next Update: Sep 14 19:03:03 2011 GMT
Is that you by any chance? 2011 is clearly not expired, but it's
possible that something views it as invalid because it's too far in the
future - certainly it isn't all that secure. It's probably after the
expiry of the CA itself as well.
I also notice in passing that a couple more CAs have CRL expiry dates
in 2006, and three more are July, September and December 2005, all of
which are rather long. Issuers are:
/DC=gov/DC=fnal/O=Fermilab/OU=Certificate Authorities/CN=Top-Level CA
/C=FR/O=CNRS/CN=CNRS-Projets
/C=CA/O=Grid/CN=Grid Canada CA
/C=FR/O=CNRS/CN=CNRS
/DC=net/DC=ES/O=ESnet/OU=Certificate Authorities/CN=ESnet Root CA 1
Stephen
|