EV Certificate Transparency

Certificate Transparency (CT) is a Google initiative to log, audit, and monitor certificates that Certificate Authorities (CAs) have issued. CT’s intent is to prevent CAs from issuing public key certificates for a domain without the domain owner’s knowledge. Chrome support for CT requires that all CAs log all Extended Validation (EV) SSL certificates in publicly auditable, append-only logs for the green address bar to appear in Chrome. This plan starts February 2015.

Certificate Transparency (CT) is a Google initiative to log, audit, and monitor certificates that Certificate Authorities (CAs) have issued. CT’s intent is to prevent CAs from issuing public key certificates for a domain without the domain owner’s knowledge. Chrome support for CT requires that all CAs log all Extended Validation (EV) SSL certificates in publicly auditable, append-only logs for the green address bar to appear in Chrome. This plan starts February 2015.

Starting on December 2014, when EV SSL certificates are issued, the certificates will be automatically logged in public CT logs.

Resources

About Certificate Transparency in Chromium (Chrome):

http://www.chromium.org/Home/chromium-security/certificate-transparency

Knowledge Base

Symantec MPKI for SSL:

https://knowledge.verisign.com/support/mpki-for-ssl-support/index?page=content&id=AR2176&actp=search&viewlocale=en_US

Symantec Retail:

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR2177

GeoTrust:

https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR2179