Cert-Watch

grid.dpcc.uta.edu @ Thu Oct 28 02:48:32 2004

Tables for:
/etc/grid-security/certificates
Specific Certificates
Textual Warnings

Table Key
Background
Meaning

The expiration date for the Certificate or CRL has passed.

 The expiration date for the Certificate (14 days) or CRL (2 days) is approaching.

 An updated CRL is available.

Cert-Watch is configured to ignore this date (based on hash value)


/etc/grid-security/certificates

Certificate Subject Cert. File Cert. Expiration CRL CRL File CRL Expires CRL Update CRL URL
/CN=Certificate Manager/OU=Ames Research Center/O=National Aeronautics and Space Administration/O=GRID b2cb8d2c.0 08/22/02 No



/C=CH/O=CERN/CN=CERN CA c35c1972.0 10/03/02 Yes c35c1972.r0 10/07/02 No http://globus.home.cern.ch/globus/ca/cern.crl.pem
/C=IT/O=INFN/OU=Authority/CN=INFN CA (2) df312a4e.0 09/22/03 Yes df312a4e.r0 11/06/03 No http://security.fi.infn.it/CA/crl-2003.pem
/C=CH/O=CERN/OU=cern.ch/CN=CERN CA bc870044.0 11/30/03 Yes bc870044.r0 12/15/03 No http://cern.ch/globus/ca/bc870044.r0
/C=DE/O=FZK-Grid/CN=FZK-Grid-CA 6df70cb1.0 12/04/03 Yes 6df70cb1.r0 01/04/04 No http://grid.fzk.de/ca/fzk-crl.pem
/C=US/ST=Illinois/O=Fermilab/CN=Fermilab Root CA/Email=nightwatch@fnal.gov 7a15b590.0 12/04/03 Yes 7a15b590.r0 01/25/04 No http://computing.fnal.gov/security/pki/fnal-root-crl.base64
/DC=net/DC=es/OU=Certificate Authorities/OU=DOE Science Grid/CN=pki1 9d8753eb.0 01/10/04 No



/C=US/O=Globus/CN=Globus Certification Authority 42864e48.0 01/23/04 No



/O=Grid/O=UKHEP/CN=UK HEP Testbed CA 0ed6468a.0 01/27/04 Yes 0ed6468a.r0 08/21/04 No http://www.gridpp.ac.uk/ca/ca-crl.pem
/C=RU/O=DataGrid/CN=Russian DataGrid CA d64ccb53.0 07/18/04 Yes d64ccb53.r0 07/24/04 Yes http://lhc.sinp.msu.ru/CA/d64ccb53.r0
/C=IE/O=Grid-Ireland/CN=Grid-Ireland Certification Authority 1e43b9cc.0 07/27/07 Yes 1e43b9cc.r0 10/28/04 Failed N/A
/C=GR/O=HellasGrid/CN=HellasGrid CA ede78092.0 08/17/09 Yes ede78092.r0 11/10/04 No http://pki.physics.auth.gr/hellasgrid-ca/CRL/ede78092.r0
/C=CZ/O=CESNET/CN=CESNET CA ed99a497.0 06/27/06 Yes ed99a497.r0 11/11/04 No http://www.cesnet.cz/pki/crl/cca.crl
/C=ES/O=DATAGRID-ES/CN=DATAGRID-ES Certification Authority 90e2484f.0 11/12/04 Yes 90e2484f.r0 11/11/04 No http://www.ifca.unican.es/datagrid/ca/datagrid-es-crl.pem
/C=TW/O=AS/CN=Academia Sinica Grid Computing Certification Authority a692434d.0 06/16/08 Yes a692434d.r0 11/12/04 No http://ca.grid.sinica.edu.tw/CRL/ASGCCA-crl.pem
/C=CH/O=CERN/OU=GRID/CN=CERN CA fa3af1d7.0 08/19/08 Yes fa3af1d7.r0 11/12/04 No http://service-grid-ca.web.cern.ch/service-grid-ca/cgi-bin/getCRL
/O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority 1f0e8352.0 05/22/06 Yes 1f0e8352.r0 11/14/04 Yes http://www.nbi.dk/HEP/CA/1f0e8352.r0
/DC=org/DC=DOEGrids/OU=Certificate Authorities/CN=DOEGrids CA 1 1c3f2ca8.0 01/10/08 Yes 1c3f2ca8.r0 11/19/04 No http://pki1.doegrids.org/CRL/1c3f2ca8.r0
/C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth 16da7552.0 02/19/06 Yes 16da7552.r0 11/20/04 No http://certificate.nikhef.nl/medium/cacrl.pem
/C=DE/O=GermanGrid/CN=GridKa-CA dd4b34ea.0 06/10/07 Yes dd4b34ea.r0 11/21/04 No http://grid.fzk.de/ca/gridka-crl.pem
/C=CY/O=CyGrid/CN=CyGrid CA 84c1f123.0 12/22/05 Yes 84c1f123.r0 11/24/04 No http://www.cs.ucy.ac.cy/crossgrid/cygrid/cygrid-ca/crl.pem
/C=PT/O=LIP/OU=LISCC/CN=LIP Certification Authority 41380387.0 03/21/07 Yes 41380387.r0 11/24/04 No http://www.lip.pt/ca/lip-crl.pem
/C=IT/O=INFN/CN=INFN Certification Authority 49f18420.0 09/18/07 Yes 49f18420.r0 11/25/04 No http://security.fi.infn.it/CA/crl.crl
/C=FR/O=CNRS/CN=Datagrid-fr 6b4ddd18.0 04/25/11 Yes 6b4ddd18.r0 11/25/04 Yes http://igc.services.cnrs.fr/cgi-bin/loadcrl?CA=Datagrid-fr&format=PEM
/C=SK/O=SlovakGrid/CN=SlovakGrid CA e13e0fcf.0 12/16/07 Yes e13e0fcf.r0 11/26/04 No http://ups.savba.sk/ca/slovakgrid.crl
/C=UK/O=eScience/OU=Authority/CN=CA/Email=ca-operator@grid-support.ac.uk 01621954.0 08/04/07 Yes 01621954.r0 11/26/04 No http://ca.grid-support.ac.uk/cgi-bin/importCRLpem
/O=dutchgrid/OU=Certificate Authorities/CN=EDG Tutorial Worthless Certification Authority 225860ae.0 09/12/07 Yes 225860ae.r0 11/26/04 Yes http://certificate.nikhef.nl/cgi-bin/tutorca-list?command=crl
/DC=gov/DC=fnal/O=Fermilab/OU=Certificate Authorities/CN=Top-Level CA 29021213.0 09/10/08 Yes 29021213.r0 04/05/05 No http://computing.fnal.gov/security/pki/29021213.base64
/C=FR/O=CNRS/CN=CNRS-Projets 34a509c3.0 04/25/11 Yes 34a509c3.r0 09/07/05 No http://igc.services.cnrs.fr/cgi-bin/loadcrl?CA=CNRS-Projets&format=PEM
/C=FR/O=CNRS/CN=CNRS cf4ba8c8.0 04/22/21 Yes cf4ba8c8.r0 09/13/05 No http://igc.services.cnrs.fr/cgi-bin/loadcrl?CA=CNRS&format=PEM
/C=CA/O=Grid/CN=Grid Canada CA 5f54f417.0 04/09/07 Yes 5f54f417.r0 10/15/05 No http://www.gridcanada.ca/ca/5f54f417.r0
/DC=net/DC=ES/O=ESnet/OU=Certificate Authorities/CN=ESnet Root CA 1 d1b603c3.0 10/08/12 Yes d1b603c3.r0 10/20/05 No http://es.net/CA/d1b603c3/CRL/d1b603c3.r0
/DC=gov/DC=fnal/O=Fermilab/OU=Certificate Authorities/CN=Kerberized CA e1fce4e9.1 12/02/05 No



/C=US/O=National Computational Science Alliance/OU=Certification Authority 5aba75cb.0 03/22/06 No



/C=SK/O=IISAS/CN=IISAS CA 1aa81ac1.0 08/12/07 No



/C=PL/O=GRID/CN=Polish Grid CA 8a661490.0 08/28/07 No



/O=Grid/O=National Aeronautics and Space Administration/OU=Ames Research Center/CN=Certificate Manager bc82f877.0 12/10/07 No



/O=Grid/OU=UTA/OU=DPCC/CN=DPCC Simple CA 273d1a14.0 01/24/09 No



/C=US/O=National Center for Supercomputing Applications/CN=Certification Authority 4a6cd8b1.0 06/18/09 No



/O=DOE Science Grid/OU=Certificate Authorities/CN=Certificate Manager 6349a761.0 01/26/10 Yes 6349a761.r0 09/14/11 No http://www.doegrids.org/OldDOEScienceGridRootCA/CRL/6349a761.r0
/C=US/O=NPACI/OU=SDSC/CN=Certificate Manager/0.9.2342.19200300.100.1.1=certman b89793e4.0 10/11/20 No



/C=US/O=NPACI/OU=SDSC/CN=Certificate Manager a7792cdb.0 09/14/37 No





Specific Certificates

Certificate Subject Cert. File Cert. Expiration CRL CRL File CRL Expires CRL Update CRL URL
/DC=org/DC=doegrids/OU=Services/CN=grid.dpcc.uta.edu hostcert.pem 10/16/05 No



/DC=org/DC=doegrids/OU=Services/CN=grid.dpcc.uta.edu hostcert.pem 10/28/04 No





Textual Warnings

Problem with CA: /C=CH/O=CERN/CN=CERN CA
Found in : /etc/grid-security/certificates/c35c1972.0
Certificate expired: Thu Oct 3 07:44:41 2002 GMT
Certificate Revocation List expired: Mon Oct 7 15:27:24 2002 GMT

Problem with CA: /C=CH/O=CERN/OU=cern.ch/CN=CERN CA
Found in : /etc/grid-security/certificates/bc870044.0
Certificate expired: Sun Nov 30 12:00:00 2003 GMT
Certificate Revocation List expired: Mon Dec 15 10:25:43 2003 GMT

Problem with CA: /C=US/ST=Illinois/O=Fermilab/CN=Fermilab Root CA/Email=nightwatch@fnal.gov
Found in : /etc/grid-security/certificates/7a15b590.0
Certificate expired: Thu Dec 4 19:19:52 2003 GMT
Certificate Revocation List expired: Sun Jan 25 15:48:29 2004 GMT

Problem with CA: /DC=net/DC=es/OU=Certificate Authorities/OU=DOE Science Grid/CN=pki1
Found in : /etc/grid-security/certificates/9d8753eb.0
Certificate expired: Sat Jan 10 23:48:37 2004 GMT

Problem with CA: /C=US/O=Globus/CN=Globus Certification Authority
Found in : /etc/grid-security/certificates/42864e48.0
Certificate expired: Fri Jan 23 19:20:24 2004 GMT

Problem with CA: /O=Grid/O=UKHEP/CN=UK HEP Testbed CA
Found in : /etc/grid-security/certificates/0ed6468a.0
Certificate expired: Tue Jan 27 09:02:59 2004 GMT
Certificate Revocation List expired: Sat Aug 21 13:10:09 2004 GMT

Problem with CA: /C=RU/O=DataGrid/CN=Russian DataGrid CA
Found in : /etc/grid-security/certificates/d64ccb53.0
Certificate expired: Sun Jul 18 15:18:40 2004 GMT
Certificate Revocation List expired: Sat Jul 24 21:37:00 2004 GMT

Potential Problem for CA: /C=RU/O=DataGrid/CN=Russian DataGrid CA
Found in : /etc/grid-security/certificates/d64ccb53.0
The CRL stored in /etc/grid-security/certificates/d64ccb53.r0
has been updated at http://lhc.sinp.msu.ru/CA/d64ccb53.r0
but not installed.

Problem with CA: /C=IE/O=Grid-Ireland/CN=Grid-Ireland Certification Authority
Found in : /etc/grid-security/certificates/1e43b9cc.0
Certificate Revocation List will expire: Thu Oct 28 11:37:53 2004 GMT

Potential Problem for CA: /C=IE/O=Grid-Ireland/CN=Grid-Ireland Certification Authority
Found in : /etc/grid-security/certificates/1e43b9cc.0
A non-functioning CRL was retrieved from None
Specified by: None

Potential Problem for CA: /O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority
Found in : /etc/grid-security/certificates/1f0e8352.0
The CRL stored in /etc/grid-security/certificates/1f0e8352.r0
has been updated at http://www.nbi.dk/HEP/CA/1f0e8352.r0
but not installed.

Potential Problem for CA: /C=FR/O=CNRS/CN=Datagrid-fr
Found in : /etc/grid-security/certificates/6b4ddd18.0
The CRL stored in /etc/grid-security/certificates/6b4ddd18.r0
has been updated at http://igc.services.cnrs.fr/cgi-bin/loadcrl?CA=Datagrid-fr&format=PEM
but not installed.

Potential Problem for CA: /O=dutchgrid/OU=Certificate Authorities/CN=EDG Tutorial Worthless Certification Authority
Found in : /etc/grid-security/certificates/225860ae.0
The CRL stored in /etc/grid-security/certificates/225860ae.r0
has been updated at http://certificate.nikhef.nl/cgi-bin/tutorca-list?command=crl
but not installed.

Problem with CA: /DC=org/DC=doegrids/OU=Services/CN=grid.dpcc.uta.edu
Found in : /etc/grid-security/preserve/hostcert.pem
Certificate will expire: Thu Oct 28 19:57:23 2004 GMT