Reasons for MRTD SSL CA revocation

Cody C made this Official Information request to Department of Internal Affairs

The request was successful.

From: Cody C

Dear Department of Internal Affairs,

I am requesting all information relating to the revocation of 4x SSL Certificate Authority / Root Certificates which are used to ensure the security of all Machine Readable Travel Documents (Passports in this case) issued in New Zealand. The serial numbers and date of revocation for each certificate are detailed below:

Serial Number: 42E57438
Revocation Date: Jul 7 01:01:20 2008 GMT

Serial Number: 42E57626
Revocation Date: Jun 30 03:00:49 2011 GMT

Serial Number: 42E577DE
Revocation Date: Jun 12 01:43:19 2014 GMT

Serial Number: 42E578A4
Revocation Date: Aug 25 03:01:29 2015 GMT

The information I am looking for specifically is relating to why these certificates were revoked (i.e. if there was a security breach) and any other information pertaining to the revocations as can be reasonably acquired.

I am requesting that the information be made available to the public due to a greater public safety interest in accordance with the Official Information Act 1982. It is not unreasonable for most or all of the details pertaining to the revocation to be released considering the amount of time that has passed since the last revocation (nearly one whole year).

For the purposes of the Act, I am a New Zealand citizen and residing in New Zealand at the time of making this request. You generally have 20 working days to respond to this notice, as required by law. Your response will be published publicly on the fyi.org.nz website.

Yours faithfully,

Cody C

Link to this

From: OIA
Department of Internal Affairs

Dear Cody C.

Thank you for your request for information under the Official Information Act 1982, received by The Department of Internal Affairs on 18 June 2016.

The Department of Internal Affairs will seek to communicate its decision to you on your request for information within 20 working days, which is by the 15 July 2016.

Please accept this email as confirmation of receipt of your request.

Kind Regards

Rosemary Dhlakama | Advisor Governance | Strategy & Governance (S&G)
The Department of Internal Affairs Te Tari Taiwhenua
Direct Dial: +64 4 494 5769 | Extn: 5769 |
147 Lambton Quay | PO Box 805, Wellington 6140, New Zealand | www.dia.govt.nz

-----Original Message-----
From: Cody C [mailto:[FOI #4154 email]]
Sent: Saturday, 18 June 2016 4:45 p.m.
To: OIA
Subject: Official Information request - Reasons for MRTD SSL CA revocation

Dear Department of Internal Affairs,

I am requesting all information relating to the revocation of 4x SSL Certificate Authority / Root Certificates which are used to ensure the security of all Machine Readable Travel Documents (Passports in this case) issued in New Zealand. The serial numbers and date of revocation for each certificate are detailed below:

Serial Number: 42E57438
Revocation Date: Jul 7 01:01:20 2008 GMT

Serial Number: 42E57626
Revocation Date: Jun 30 03:00:49 2011 GMT

Serial Number: 42E577DE
Revocation Date: Jun 12 01:43:19 2014 GMT

Serial Number: 42E578A4
Revocation Date: Aug 25 03:01:29 2015 GMT

The information I am looking for specifically is relating to why these certificates were revoked (i.e. if there was a security breach) and any other information pertaining to the revocations as can be reasonably acquired.

I am requesting that the information be made available to the public due to a greater public safety interest in accordance with the Official Information Act 1982. It is not unreasonable for most or all of the details pertaining to the revocation to be released considering the amount of time that has passed since the last revocation (nearly one whole year).

For the purposes of the Act, I am a New Zealand citizen and residing in New Zealand at the time of making this request. You generally have 20 working days to respond to this notice, as required by law. Your response will be published publicly on the fyi.org.nz website.

Yours faithfully,

Cody C

-------------------------------------------------------------------

This is an Official Information request made via the FYI website.

Please use this email address for all replies to this request:
[FOI #4154 email]

Is [DIA request email] the wrong address for Official Information requests to Department of Internal Affairs? If so, please contact us using this form:
https://fyi.org.nz/change_request/new?bo...

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.

-------------------------------------------------------------------

hide quoted sections

Link to this

From: Cody C

Dear OIA,

I was expecting a response as per your email by July 15 but have not received this. You are now outside the timeframe of the Official Information Act. Please respond immediately or this may be referred to the Ombudsman.

Yours sincerely,

Cody C

Link to this

From: Adrienne Watkin
Department of Internal Affairs


Attachment image002.png
16K Download

Attachment OIA Request Revocation of Certificates.pdf
55K Download View as HTML


Dear Cody C

 

Please find attached the response to your OIA request

 

Yours sincerely

 

Adrienne Watkin | Advisor | Identity & Passport Services

Department of Internal Affairs  

Tel: 0800 22 50 50 | Int'l Tel: +64 4 463 9360 | Fax: +64 4 474 8080

120 Victoria Street | PO Box 1568, Wellington 6140, New
Zealand|www.dia.govt.nz

 

[1]http://www.dia.govt.nz/diawebsite.nsf/Fi...

 

References

Visible links

Link to this

Things to do with this request

Anyone:
Department of Internal Affairs only: