2

Chrome specifies that it maintains a internal "hard-coded" list of root certificates that are "EV-Qualified".

https://www.chromium.org/Home/chromium-security/root-ca-policy#TOC-Extended-Validation-Certificates

Is there any up-to-date list of these certificates that is publicly available?

To be totally clear - This question pertains specifically to Extended Validation Certificates I understand that we can manipulate our trusted certificates for non EV.

Also, has anyone experienced what happens when Chrome encounters an EV cert which has a user-defined trusted root which is not in the "hard-coded" list? I'm wondering how this would work behind a "SSL-Inspecting" security device.

Improve this question

1 Answer 1

Reset to default
-1

You can easily find them in the source code of Chromium:

ev_root_ca_metadata.cc

If the EV Root Certificate isn't in that list it will simply be used like any other root certificate, i.e. no fancy name company name in the address bar.

Improve this answer
2
  • 2
    Welcome to security.se! To make your answer a little more self-contained, can you also answer the last paragraph of the question?
    – Mike Ounsworth
    Dec 10, 2018 at 21:24
  • @MikeOunsworth, done.
    – Mikael Dúi Bolinder
    Dec 11, 2018 at 16:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .