Re: New Thawte Enterprise Certificate Center

[Laurie Zirkle <lat () VT EDU>]

> From the fingers of Mark Borrie:
> I cant answer Gary's question but want to add something of our recent
> experience with the new Thawte service.

I can't answer Gary's question either, but I'm not very impressed with
their new system.  I have no authority to approve Thawte certificates,
but I'm the one that generates the CSRs for all the Thawte certificates
that my machines use (thankfully, not many).  My biggest beef at the
moment is their renewals.  Up until December, any renewal was good
from the time it was issued until 1 year from the original expiration.
Now, the renewal is only good from the time it was issued for exactly
one year.  So if I start the renewal process early (because I have to
go through the budget-approval and other bureaucracy), I lose anywhere
from a week to over a month from the original expiration (which was
already paid for).  Since we originally timed some of the Thawte
certificates to expire during our winter break, it was very
disconcerting to find my renewal(s) will expire before the 2010
winter break even starts.

We haven't gotten an answer from them regarding this as of yet.

--
Laurie Zirkle                  E-mail: lat at vt dot edu
GSEC/GCUX/GCIA/GCIH/GCFA/GBE
Virginia Tech CNS              Voice: (540)231-6370
Blacksburg VA 24061            Pager: (540)953-3691