 |
About Renewal of Certificates |
|
 |
 |
| Important Notice |
Since we have obtained a new validity period of 10 years for our TimeStamp service, certificates will be renewed accordingly.
Our service will be suspended based on the Time-Stamping Service Practice Statement 4.5.1 (2).
Thank you for your understanding and we apologize about the inconvenience.
 Down time: July 19, 2011 12:30 to 12:55 p.m. (JST) (Scheduled)
Down time: August 1, 2011 12:30 to 12:55 p.m. (JST) (Scheduled)
*Rescheduled due to renewal of certificates(7/11/11)
(Note) Requests to issue timestamps may not be accepted during the above period.
(Note) For TimeStamp service maintenance schedule, click here.
Please also make sure to check the following "Contents of system changes" at least 1 day before the above date.
(Note) This notice applies to all customers using the following tools:
- PFU TimeStamp Client Tool
- PFU TimeStamp for Adobe Acrobat
- Application developed with PFU TimeStamp SDK
|
|
 |
Contents of system changes |
 |
1. Items to check in advance
- Certificates
- Root certificate
https://repository.secomtrust.net/SC-Root1/SCRoot1ca.cer
This is required upon obtaining or verifying the timestamp.
Configure the setting after downloading. For details, refer to the following links.
- For operating systems other than Windows Server® 2003/2008: See "Checking and Importing a Root Certificate".
- For Windows Server® 2003/2008: See "Checking and Importing a Root Certificate (Windows Server® 2003/2008)".
- Certificate Revocation List (CRL) for Time Stamping Authority (TSA) certificates
http://repository.secomtrust.net/SC-Root1/SCRoot1CRL.crl
This is required upon obtaining or verifying the timestamp.
This is required upon verifying the timestamp.
If access to the above URL is restricted by firewall etc, make sure to change the setting.
- Intermediate certificate
There is no intermediate certificate, and only root certificates is used.
- Certificate Revocation List (CRL) for intermediate certificates
There is no intermediate certificate, and only root certificates is used.
- Time Stamping Authority (TSA) certificate
This is provided in the timestamp token.
|
2. Details of the changes
- Policy ID
- TimeStamp Policy
Current: 0.2.440.200185.1.2.2
New: 0.2.440.200185.1.2.3
- Certification Authority Policy used by Time Stamping Authority
Current: Public Key Certificate Policy for SecureSignAD TimeStamp (1.2.392.200075.4.2)
New: Certificate Policy for Security Communication RootCA TimeStamp service (1.2.392.200091.100.901.2)
- TimeStamp Token Profile
- TSApolicyId(value)
The value for TSTInfo will be changed as follows:
Current: 0.2.440.200185.1.2.2
New: 0.2.440.200185.1.2.3
- Time-Stamping Service Practice Statement
Time-Stamping Practice Statement will be revised due to the renewal of Time Stamping Authority certificate.
TPS2.3 (English)
:This TPS becomes effective on August 1, 2011.
|
3. Additional note
Depending on your system environment, you may have to access the following URL to obtain a timestamp.
- SSL Certificate Revocation List(CRL)
http://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/fullcrl.crl
If you are still unable to obtain a timestamp after the setting in step 1. 1. ,
confirm that access to the above URL is not restricted by firewall etc.
If it is restricted, change the setting.
|
 |
|
 |