Timothy Hollebeek

Latest by Timothy Hollebeek

Working with Delegated OCSP Responders and EKU Chaining

It was reported recently that due to a technical flaw, it is possible for some Certificate Authorities (CAs) to create valid OCSP responses for certificates that they did not issue and do not control. This creates an issue for the CAs that operate...

CA/B Forum Update on EV Certificate Improvements

DigiCert actively participates in several industry standards groups and discussions. This year many in-person events have been canceled due to COVID-19 restrictions, which makes it harder to build relationships through side conversations that foster...

Certification Authority Authorization Checking: What is it, and Why Does it Matter?

The Public Key Infrastructure (PKI) ecosystem relies on root certificates issued by various certificate authorities (CAs) like DigiCert. This is what browsers use to decide which websites can be trusted and which ones can’t. But if any CA can...

View More