哪个CA颁发时间戳证书
我公司目前实施TSA（时间戳授权）服务。现在我们正在寻找CA（证书颁发机构），它可以颁发具有预期用途的证书：时间戳。我联系了几个CA，但他们只提供数字身份证书，对TSA一无所知。也许有人有解决此类问题的经验？
Our company currently implementing TSA (Time Stamp Authority) service. And now we are searching CA (Certification Authority), which could issue certificate with intended usage: Timestamping. I contacted with few CA's, but they offer just Digital ID certificates, and know nothing about TSA. Maybe someone has experience with such problem?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
我怀疑您是否会发现任何商业 CA 提供带有时间戳使用的证书。没有市场，也不符合他们的利益。就像使用 CA 或 OSCPSigning 的证书一样，只有与 CA 达成某种业务协议才能获得它。
如果您提供 TSP 服务，则可以仅使用常规证书并忽略使用情况。根据您使用的库，它可能根本不检查使用情况。然而，Java 6 确实会检查它。
您还可以使用自签名证书并将根 CA 分发给想要在本地进行验证的任何人。
I doubt you will find any commercial CAs offer certificates with timestamping usage. There is no market and it goes against their interests also. Just like the certificate with CA or OSCPSigning usage, you can only get it if you have some kind of business deal with CA.
If you are offering a TSP service, you can just use regular cert and ignore the usage. Depending on the library you use, it may not check usage at all. However, Java 6 does check it.
You can also use a self-signed cert and distribute your root CA to whoever wants to do verification locally.