auto fpki graph update (20201215)

@idmken and @lachellel

Please find this week's Federal PKI Crawler/Graph update (December 15, 2020 execution).

Live Preview: https://federalist-2147738e-703c-4833-9101-89d779f09ce1.app.cloud.gov/preview/gsa/fpki-guides/20201215-auto-fpki-graph-update/tools/fpkigraph/

Nodes Added or Removed (compared to December 8, 2020 execution):

No change.

Edges Added or Removed (compared to November 30, 2020 execution):

REMOVED (E1): CN=Trans Sped Mobile eIDAS QCA G2,OU=Individual Subscriber CA,O=Trans Sped SRL,C=RO -> CN=SAFE Bridge CA 02,OU=Certification Authorities,O=SAFE-Biopharma,C=US
REMOVED (E2): OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US -> OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
REMOVED (E3): OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US -> OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
REMOVED (E4): OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US -> OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
REMOVED (E5): OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US -> OU=GPO SCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US

Root Cause Analysis:

E1: Certificate revocation. Certificate Details:
- Issuer: CN=Trans Sped Mobile eIDAS QCA G2,OU=Individual Subscriber CA,O=Trans Sped SRL,C=RO
- Subject: CN=SAFE Bridge CA 02,OU=Certification Authorities,O=SAFE-Biopharma,C=US
- Validity: August 30, 2017 to August 30, 2023
- Serial #: 6190bbe94ab32937
- Thumbprint (SHA-1): 17b547ebe24797e2fa48622de70986a301e93e65
- Key Size: 2048-bit (RSA)
- Signature: SHA-256 with RSA
E2: Certificate expiration. Certificate Details:
- Issuer: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Subject: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Validity: December 15, 2010 to December 15, 2020
- Serial #: 40d86a18
- Thumbprint (SHA-1): 2966fc7cbe4b4134c2b7bc562fcf7b47dae3894e
- Key Size: 2048-bit (RSA)
- Signature: SHA-256 with RSA
E3: Certificate expiration. Certificate Details:
- Issuer: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Subject: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Validity: December 15, 2010 to December 15, 2020
- Serial #: 40d7d0c1
- Thumbprint (SHA-1): 136655ffb5c84c9fe7362d5508081e2f4b00fb76
- Key Size: 2048-bit (RSA)
- Signature: SHA-256 with RSA
E4: Certificate expiration. Certificate Details:
- Issuer: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Subject: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Validity: October 14, 2015 to December 15, 2020
- Serial #: 40d86a19
- Thumbprint (SHA-1): 04ed6a7ba63f0340fb0dabeebf4424ae78b004ac
- Key Size: 2048-bit (RSA)
- Signature: SHA-256 with RSA
E5: Certificate expiration. Certificate Details:
- Issuer: OU=GPO PCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Subject: OU=GPO SCA,OU=Certification Authorities,OU=Government Printing Office,O=U.S. Government,C=US
- Validity: December 15, 2010 to December 15, 2020
- Serial #: 40d7d0ee
- Thumbprint (SHA-1): 4c1a6548bb9e9a7854894d0437357019fb2efbfe
- Key Size: 2048-bit (RSA)
- Signature: SHA-256 with RSA

Other updates:

Completed the System Notification for the Federal Bridge CA G4's revocation of USPTO_INTR_CA1, and closed issue #789
Made a minor update to the Common Policy Update FAQ to include a graphic requested by our partners at CISA (helps describe current/future state of certificate validation).

GSA / fpki-guides

auto fpki graph update (20201215) #804