auto fpki graph update (20210129)

@idmken

Please find this week's Federal PKI Crawler/Graph update (January 29, 2021 execution).

Live Preview: https://federalist-2147738e-703c-4833-9101-89d779f09ce1.app.cloud.gov/preview/gsa/fpki-guides/20210129-auto-fpki-graph-update/tools/fpkigraph/

Nodes Added or Removed (compared to January 21, 2021 execution):

No change.

Edges Added or Removed (compared to January 21, 2021 execution):

E1 (ADDED): CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US -> CN=DigiCert Federal SSP Intermediate CA - G5, O=DigiCert,Inc., C=US
E2 (ADDED): CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US -> CN=ORC SSP 4, O=ORC PKI, C=US
E3 (ADDED): CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US -> CN=Symantec SSP Intermediate CA - G4, O=Symantec Corporation, C=US
E4 (ADDED): CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US -> CN=Verizon SSP CA A2, OU=SSP, O=Verizon, C=US
E5 (ADDED): CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US -> OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US
E6 (REMOVED): CN=TSCP SHA256 Bridge CA, OU=CAs, O=TSCP Inc., C=US -> CN=Fortior Solutions Intermediate CA 2018, OU=Certificate Authorities, O=Fortior Solutions, C=US
E7 (REMOVED): OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US -> OU=DHS CA4, OU=Certification Authorities, OU=Department of Homeland Security, O=U.S. Government, C=US
E8 (REMOVED): OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US -> OU=NASA Operational CA, OU=Certification Authorities, OU=NASA, O=U.S. Government, C=US
E9 (REMOVED): OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US -> OU=Social Security Administration Certification Authority, OU=SSA, O=U.S. Government, C=US

Root Cause Analysis:

E1: New certificate issued by Federal Common Policy CA G2 detected by the Crawler after being issued to Subject CA Operator Authority Information Access Extension bundle. Certificate details:
- Subject: CN=DigiCert Federal SSP Intermediate CA - G5, O=DigiCert,Inc., C=US
- Issuer: CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US
- Validity: 11/18/2020 to 12/13/2028
- Serial: 24bc168f9ccb30cfcef8f0a58f26f10181869266
- SHA1 Hash: 9aecfbe2de8aea49d220bbf799172c00527fe756
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-384 with RSA
E2: New certificate issued by Federal Common Policy CA G2 detected by the Crawler after being issued to Subject CA Operator Authority Information Access Extension bundle. Certificate details:
- Subject: CN=ORC SSP 4, O=ORC PKI, C=US
- Issuer: CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US
- Validity: 11/18/2020 to 1/21/2024
- Serial: 20a0e513367881559a5e7d20d35fa7c6739a42ab
- SHA1 Hash: 3e6610b03daca9fa07e1093b60ccb8927c42d83b
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-384 with RSA
E3: New certificate issued by Federal Common Policy CA G2 detected by the Crawler after being issued to Subject CA Operator Authority Information Access Extension bundle. Certificate details:
- Subject: CN=Symantec SSP Intermediate CA - G4, O=Symantec Corporation, C=US
- Issuer: CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US
- Validity: 11/18/2020 to 11/12/2024
- Serial: 262bd1f025c8af37334545666ea6c9ea946c2c34
- SHA1 Hash: 4c40f62b5c3f13533a8f8a1d44f8b027aaa0fd3d
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-384 with RSA
E4: New certificate issued by Federal Common Policy CA G2 detected by the Crawler after being issued to Subject CA Operator Authority Information Access Extension bundle. Certificate details:
- Subject: CN=Verizon SSP CA A2, OU=SSP, O=Verizon, C=US
- Issuer: CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US
- Validity: 11/18/2020 to 12/6/2026
- Serial: 25fca834ada24a4455a2db0ff4cef7c411198e3a
- SHA1 Hash: b2167fd38ff47bb910d8dcc32fcc3b7b63a09ff7
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-384 with RSA
E5: New certificate issued by Federal Common Policy CA G2 detected by the Crawler after being issued to Subject CA Operator Authority Information Access Extension bundle. Certificate details:
- Subject: OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US
- Issuer: CN=Federal Common Policy CA G2, OU=FPKI, O=U.S. Government, C=US
- Validity: 11/18/2020 to 8/14/2022
- Serial: 2013db2cd30dd29d17edc48535c5e00d8916cf02
- SHA1 Hash: d7d298927d339efa414f2565923e28b98acd970a
- Key Size: 4096-bit (RSA)
- Signing Algorithm: SHA-384 with RSA
E6: Certificate Expiration. Certificate details:
- Subject: CN=Fortior Solutions Intermediate CA 2018, OU=Certificate Authorities, O=Fortior Solutions, C=US
- Issuer: CN=TSCP SHA256 Bridge CA, OU=CAs, O=TSCP Inc., C=US
- Validity: 1/22/2020 to 1/22/2021
- Serial: 3cd4087a04abd3ed749d9c3cb6ad7cf9
- SHA1 Hash: 000ea5b4b63f39d083bd5a0777ca334d6ff58c94
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-256 with RSA
- Note: this certificate will not be renewed.
E7: Certificate Expiration. Certificate details:
- Subject: OU=DHS CA4, OU=Certification Authorities, OU=Department of Homeland Security, O=U.S. Government, C=US
- Issuer: OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US
- Validity: 1/21/2011 to 1/21/2021
- Serial: 4a61d293
- SHA1 Hash: 49ae4f027419a3eb227e4cd4ccf4ff1bc75213b6
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-256 with RSA
E8: Certificate Expiration. Certificate details:
- Subject: OU=NASA Operational CA, OU=Certification Authorities, OU=NASA, O=U.S. Government, C=US
- Issuer: OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US
- Validity: 1/22/2011 to 1/22/2021
- Serial: 4a61d2a5
- SHA1 Hash: 76a6eaa852710e00b368c41080e6131140aaf189
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-256 with RSA
- Note: this certificate was previously re-keyed by the Treasury SSP
E9: Certificate bundle update. The following certificate is no longer hosted (expires shortly):
- Subject: OU=Social Security Administration Certification Authority, OU=SSA, O=U.S. Government, C=US
- Issuer: OU=US Treasury Root CA, OU=Certification Authorities, OU=Department of the Treasury, O=U.S. Government, C=US
- Validity: 2/16/2011 to 2/16/2021
- Serial: 4a61d2ba
- SHA1 Hash: b4b209aade830834c9b5c2f815021d28dc381fe1
- Key Size: 2048-bit (RSA)
- Signing Algorithm: SHA-256 with RSA

Other updates:

Added System Notifications to close #806 and #747
Removed references to Jan. 28 CISA webinar. Will add new webinar date, once identified.

GSA / fpki-guides

auto fpki graph update (20210129) #821