Add citation for sub-CAs to ca_digital_signature_not_set (zmap#464)

RufusJWB · Sep 1, 2020 · e1a9412 · e1a9412
1 parent 9ab0643
commit e1a9412
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/v2/lints/cabf_br/lint_ca_digital_signature_not_set.go b/v2/lints/cabf_br/lint_ca_digital_signature_not_set.go
@@ -15,7 +15,11 @@ package cabf_br
  */
 
 /************************************************
-BRs: 7.1.2.1b
+BRs: 7.1.2.1b: Root CA Certificate keyUsage
+This extension MUST be present and MUST be marked critical. Bit positions for keyCertSign and cRLSign MUST be set.
+If the Root CA Private Key is used for signing OCSP responses, then the digitalSignature bit MUST be set.
+
+BRs: 7.1.2.2e: Subordinate CA Certificate keyUsage
 This extension MUST be present and MUST be marked critical. Bit positions for keyCertSign and cRLSign MUST be set.
 If the Root CA Private Key is used for signing OCSP responses, then the digitalSignature bit MUST be set.
 ************************************************/