Staging Root/Intermediates saying "(STAGING)" in subject

Documentation
1

Just another post of me being curious and nitpicky.

The prior generations of staging roots and intermediates say (STAGING) in both the O= and CN= fields of the subject.

C = US, O = (STAGING) Internet Security Research Group, CN = (STAGING) Pretend Pear X1

However, the new ones only say it in the CN= field, and not in the O= field

C = US, O = ISRG, CN = (STAGING) Yonder Yam Root YR

I don't know as it really matters for anything (and I doubt there are any real rules for roots that aren't supposed to be in public trust stores anyway), just noticed that it's different.

But then, the staging environment roots documentation doesn't seem to match up:

  1. It doesn't list the C = US in the subject that the staging roots & intermediate certificates in fact have.
  2. It says O = (STAGING) ISRG for "Yearning Yucca Root YE" and "Yearning Yonder Yam Root YR", when those actual roots only have just O = ISRG

And maybe a separate documentation issue, but it says "If strictly necessary" one can find the intermediate certificates listed in Github for the website, but I don't see the generation Y intermediates listed there anywhere. Though maybe I'm just looking in the wrong place.

7 Likes
2

Thanks for pointing out the docs error! We can fix that pretty easily.

We have been inconsistent about where we put (STAGING) (or various other tags, for CI and Dev and dry-run ceremonies) in the past; it's only recently that we've settled on only ever putting it in the CN. No point in having it everywhere, once is more than enough.

6 Likes
3

Thanks. I thought it might just be a docs error, but I thought it was also possible that it was something more than that. Appreciate all the hard work, and for putting up with my nitpicking!

7 Likes