Comment 28 for bug 310999

Revision history for this message
In , Robin-comodo (robin-comodo) wrote :

(In reply to comment #22)
> I think there are some open questions here, including:
> a) How many resellers were selling certs subordinate to that same PositiveSSL
> CA cert?
Many.

> If that number is more than 1, then the second question is:
> b) Did all those resellers share a common DV checking service?
> Or did each provide its own DV checking independently?
There is more than one checking service.

CertStar are an RA, not just a reseller. (non-RA) Resellers can never do their own validation - they have to use our central DV checking service.
CertStar implemented their own DV checking.