> subCA WoTrus RSA DV SSL CA 2  (https://crt.sh/?caid=427494) seems lack a 
> quick way (posting by web form) to submit revocation request

That's incorrect.

> So the report is posted to Sectigo.

Since Sectigo is the CA Owner in this case, that was the correct thing to do.


________________________________
From: [email protected] <[email protected]> on 
behalf of Yuwei HAN (hanyuwei70) <[email protected]>
Sent: 16 March 2026 13:43
To: [email protected] <[email protected]>
Subject: Revocation method is missing by subCA

Hi, all. https: //crt. sh/?id=24937759962 private key is leaked, and subCA 
WoTrus RSA DV SSL CA 2  (https: //crt. sh/?caid=427494) seems lack a quick way 
(posting by web form) to submit revocation request. So the report is posted to 
Sectigo. In
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
Report 
Suspicious<https://us-phishalarm-ewt.proofpoint.com/EWT/v1/J5K_pWsD!CSYXcEZ114oyK_OqGHiXg6InuubGuzwddg1s_jlbP2mdUYrPksuu2oHi0T0vao_QPaaF4wsqPqlDtv_2_p0akHCJZWHMBhdI9g$>

ZjQcmQRYFpfptBannerEnd
Hi, all.
https://crt.sh/?id=24937759962<https://urldefense.com/v3/__https://crt.sh/?id=24937759962__;!!J5K_pWsD!1NVS7fCztiPKneHtG8kOdZE_dGZkF3vFJHx5_FXXHUQbMDvK5Ft-v6HpjGU5HZ5hgBF7I3NRIaXKO2Y$>
 private key is leaked, and subCA WoTrus RSA DV SSL CA 2  
(https://crt.sh/?caid=427494<https://urldefense.com/v3/__https://crt.sh/?caid=427494__;!!J5K_pWsD!1NVS7fCztiPKneHtG8kOdZE_dGZkF3vFJHx5_FXXHUQbMDvK5Ft-v6HpjGU5HZ5hgBF7I3NR_lsBKl8$>)
 seems lack a quick way (posting by web form) to submit revocation request. So 
the report is posted to Sectigo.

In BR 4.9, there seems no explicit requirement for sub CA to support revocation 
request. Should we be more clear about this? (e.g. require all chain of trust 
CAs should process revocation request).
--
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
[email protected]<mailto:[email protected]>.
To view this discussion visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/5084cfc0-e82b-4d15-b578-f829645aa59cn%40mozilla.org<https://urldefense.com/v3/__https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/5084cfc0-e82b-4d15-b578-f829645aa59cn*40mozilla.org?utm_medium=email&utm_source=footer__;JQ!!J5K_pWsD!1NVS7fCztiPKneHtG8kOdZE_dGZkF3vFJHx5_FXXHUQbMDvK5Ft-v6HpjGU5HZ5hgBF7I3NRVUMcSkk$>.

-- 
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/MW4PR17MB47294DA3911747368C64D6EDAA40A%40MW4PR17MB4729.namprd17.prod.outlook.com.

Reply via email to