News for hackers. Stuff that matters.

A comment on All extensions disabled due to expiration of intermediate signing cert. Parent comment

Re:All extensions disabled due to expiration of intermediate... by MrStonedOne on Saturday May 04, 2019 @12:45AM (#19824509)
Revocation requires the private key
[ Parent | on HN ]
Re:All extensions disabled due to expiration of intermediate... by pinjiz on Saturday May 04, 2019 @02:28AM (#19824796)
This is not true. In Let's Encrypt/ACME for example, you can simply obtain authorizations for all the domains a certificate is valid for and request revocation [1]. The only thing you still need to revoke the certificate, is the certificate itself. The certificate can be obtained from CT logs.

[1] https://tools.ietf.org/html/rfc8555#section-7.6

[ Parent | on HN ]