New DoD Root and Intermediate CAs

[jeffschulman]

DISA has distributed the CA certificates for Root CAs 4 and 5, as well as the intermediate CA certificates through 52. The most recent one in the current package on this site is Root CA 3 and Intermediate CA 38.

[iadgovuser1]

Noted. I will get that updated when I have a bit more time available.

[iadgovuser1]

@jeffschulman Do you know if there is a source for these certificates other than using InstallRoot (the tool for installing the DoD root CA certificates)?

[jeffschulman]

http://iasecontent.disa.mil/pki-pke/Certificates_PEM_v5.0u1_DoD.exe. Root CA5 has not yet issued certificates for issuing CAs. Source: https://iasecontent.disa.mil/pki-pke/DoD_Approved_External_PKIs_Master_Document_v6.0_20160721.pdf

[iadgovuser1]

@jeffschulman Thanks. Looks like it is listed under the Trust Store heading at https://iase.disa.mil/pki-pke/Pages/tools.aspx Odd that they don't link to the HTTPS hosted versions... but they work if you manually specify it.

[iadgovuser1]

I'll get this changed once I check what the latest SHB distribution ships with and update the GPO.