logoalt Hacker News

zahlman • yesterday at 4:41 PM • 2 replies • view on HN

What is the dv-g3b- part supposed to mean? I.e. why was this specific name chosen for the subdomain?


Replies

Polizeiposaune • yesterday at 5:02 PM

eMudhra generated multiple weak private keys and included their public counterpart in multiple intermediate certificates. You need to check that all the intermediates are rejected.

See the lists in https://bugzilla.mozilla.org/show_bug.cgi?id=2083449; I believe that "dv-g3b-" corresponds to the intermediate CA certificate listed as "EM DV TLS CA - G3B"

DV/OV/EV are "Domain Validated", "Organization Validated" and "Extended Validation" which refer to different levels of checking that the CA should done before issuing a certificate with a particular name in it.

consonaut • yesterday at 4:49 PM

DV is probably "Domain validated" describing the type of cert and g3b is the specific root cert the chain starts from.