WIDE ROOT CA Information

WIDE ROOT CA (self-signed CA) was build on September 25th in 1998. WIDE ROOT CA is a CA which issues CA's certificates, and the purpose of building such a CA is as follows:

To build another parent CA for the moCA (WIDE members only CA), instead of ICAT PCA which was the previous parent CA, and to examine how to move the moCA to the new parent, the WIDE ROOT CA
To examine secret key changes of a root CA and to get know-how about management of CAs
To provide a trusted point for an authentication infrastructure for several WIDE project activities.

After some experiments, the WIDE ROOT CA now gets into real operation phase on December, 1998..

WIDE ROOT CA Certificate

!!!!!Caution!!!!! WIDE ROOT CA had a 2,048bit key on January 18th, 2000. We now use the new 2,048bit key to issue new certificates.
We don't revoke the old, 512bit key WIDE ROOT CA certificate, so it still remains valid.

The information of WIDE ROOT CA Certificate with 512bit are there.

The information below is for the certificate with 2,048 bit key.

WIDE ROOT CA Certificate with 2,048bit can be retrieved.

We recommend "WIDE ROOT CA" for the CA nickname on your browser, for examle.

The fingerprint of the WIDE ROOT CA certificate is:

        2B:68:BD:1B:26:28:2A:AC:CF:F3:45:90:1D:6C:2A:9C

The fingerprint is printed when you select the menus "Security Information", "Signer" and "WIDE ROOT CA" substantially and push "Confirmation" button.

If you manage a Web server (Apache+SSL) which trusts the WIDE ROOT CA, please configure the data below:

The contents of the certificate is as follows:

Version No = 2
Serial No = 10
Validity        from 000118125301Z
                to   060630235959Z
issuer:
        C=JP
        O=WIDE Project
        CN=ROOT CA
subject:
        C=JP
        O=WIDE Project
        CN=ROOT CA
signature:
        sha1WithRSAEncryption
publickey:
        alg = rsaEncryption
basicConstraints:
        critical
        CA
        pathLenConstraint:      10

CRL issued by the WIDE ROOT CA: a CRL issued by WIDE ROOT CA can be retrieved from this area.

The WIDE ROOT CA policy

The current WIDE ROOT CA policy memo can be retrieved from here.
Note that it could be changed.

Here's the rough requirements to the CA for which the WIDE ROOT CA issues a certificate.

To understand that the WIDE ROOT CA is a experimental CA and it happens to change the operation policy and to stop the operation.
To publish the CA policy, such as the purpose of the CA and how the CA issues a certificate.

The contact e-mail address about the WIDE ROOT CA is moca-wg@wide.ad.jp.

The History of WIDE ROOT CA

Up on September 25th ,1998
Key changed on October 29th, 1998
Key changed on November 25th, 1998
Key changed on January 18th, 2000

Status of the WIDE ROOT CA Hierarchy

WIDE ROOT CA	----- moCA	[policy] [cert contents]
	----- SOI CA	[policy] [cert contents]

year	date	event
1998	September 25th	issues moCA certificate
	September 28th	issues SOI CA certificate
	October 21st	re-issues SOI CA certificate
	October 30th	re-issues moCA certificate
	October 30th	re-issues SOI CA certificate
	November 26th	re-issues moCA certificate
	November 26th	re-issues SOI CA certificate
2000	January 20th	re-issues SOI CA certificate
	January 27th	re-issues moCA certificate

moCA WG, WIDE Project, Oct., 2000

WIDE ROOT CA Information

The purpose of WIDE ROOT CA

WIDE ROOT CA Certificate

CRL issued by the WIDE ROOT CA

The WIDE ROOT CA policy

The History of WIDE ROOT CA

Status of the WIDE ROOT CA Hierarchy