Re: New Thawte Enterprise Certificate Center

["Sauvigne, Craig M" <sauvignec () WINTHROP EDU>]

Here at Winthrop, we renewed 6 of our certs the first week of January
that were coming up for renewal in the next couple of months. All our
renewed certs show an expiration date that was an additional year(s)
from the original expiration, not a year from the date it was issued.
Everything appears to be working correctly and the renewal periods we
got were fair.

Some of the renewals were for one year, some were for multiple years.

We did notice the change in approvals that are cause for concern but
everything else seemed to work fine on the new enterprise system.

====================
Craig M. Sauvigne
System Administrator
Winthrop University
Rock Hill, SC 29733
sauvignec () winthrop edu



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Russell Fulton
Sent: Tuesday, January 12, 2010 6:02 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] New Thawte Enterprise Certificate Center

On 13/01/2010, at 2:59 AM, Laurie Zirkle wrote:
> I can't answer Gary's question either, but I'm not very impressed with
> their new system.  I have no authority to approve Thawte certificates,
> but I'm the one that generates the CSRs for all the Thawte
certificates
> that my machines use (thankfully, not many).  My biggest beef at the
> moment is their renewals.  Up until December, any renewal was good
> from the time it was issued until 1 year from the original expiration.
> Now, the renewal is only good from the time it was issued for exactly 
> one year.

Hey, I wondered why they just started sending out renewal notices
*three* months ahead, now I know! (expletives deleted ;)

We have just signed up with AusCERT for their Comodo based service. We
have pushed over 100 certs through their system over the last month (all
our IPSCA certs) and will replace the Thawte ones as they expire.
AusCERT Rocks!

Unfortunately the service is only available to AusCERT Members but I do
highly recommend it to those of you who do belong to AusCERT (I know
there are at least two others ;)

R