Mobile app version of vmapp.org
Login or Join
Candy875

: How do I create a High Assurance Root Certificate Authority I understand the basic nature of High Assurance Certificates. You pay more money for a certificate and the Certificate Authority investigates

@Candy875

Posted in: #CertificateGeneration #SecurityCertificate

I understand the basic nature of High Assurance Certificates. You pay more money for a certificate and the Certificate Authority investigates your company to a greater degree. After that occurs and they sign your certificate, then the Organization name appears in the URL for various modern browsers (Firefox, Google Chrome, Safari).

But let's say I want to create my own High Assurance Certificate Authority. (Let's say for a company intranet). Does anyone know any details on how this occurs? Do I simply have the text "High Assurance" in the Common Name for my CA?

What part of the certificate on the Root CA indicates that it is "High Assurance" or rather that the company has been investigated? Or is it part of the Root CA at all?

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Candy875

1 Comments

Sorted by latest first Latest Oldest Best

 

@Kevin317

EV/High Assurance SSL certs use unique object IDs that are inserted into the extended policy field of the SSL certificate. Most applications (browsers) that support EV-SSL have this OID and CA fingerprint hard coded into them. When they get a successful match, the browser then displays the extended data.

You don't mention your usage case, but if this is for web browsers, you are likely stuck.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme