Zitat von Martijn Brinkers <martijn(a)djigzo.com>om>:
is there a
easy way to find out which root-CA is missing if a user
certificate is stated as invalid because of missing root?
The way to do it currently is to copy the issuer field of the
certificate (open the certificate info by clicking the cert) then search
for the issuer field in the certificate store by clicking the filter,
select "Filter by: Subject" and paste the issuer.
You should normally get at max one result which should normally be the
issuer.
Perhaps I might add a path builder result page which shows the possible
cert path.
This would require the root CA already in the store?
I was looking for a way to find out where to look for a download for
example if a certificate arrives with no matching root CA until now.
Is there some URL included in the cert data which contain a path to
the issuer CAs.
Regards
Andreas