auto fpki graph update (20210209)

[ryancdickson]

@idmken

Please find this week's Federal PKI Crawler/Graph update (February 9, 2021 execution).

Live Preview: https://federalist-2147738e-703c-4833-9101-89d779f09ce1.app.cloud.gov/preview/gsa/fpki-guides/20210209-auto-fpki-graph-update/tools/fpkigraph/

Nodes Added or Removed (compared to February 3, 2021 execution):

• N1 (ADDED): CN=WidePoint NFI CA 6,O=ORC PKI,C=US

Edges Added or Removed (compared to February 3, 2021 execution):

• E1 (ADDED): CN=WidePoint NFI Root 2, OU=Certification Authorities, O=WidePoint, C=US -> CN=WidePoint NFI CA 6, O=ORC PKI, C=US

Root Cause Analysis:

• E1/N1: New certificate detected. Certificate details:
  • Subject: CN=WidePoint NFI CA 6, O=ORC PKI, C=US
  • Issuer: CN=WidePoint NFI Root 2, OU=Certification Authorities, O=WidePoint, C=US
  • Validity: February 3, 2021 to December 31, 2030
  • Serial: 15707f8b78d4594f0fdc0d7884241c7659dd83e3
  • SHA1 Hash: 8a17d236acb45af809c0a4555f7142d82ae08736
  • Key Size: 2048-bit RSA
  • Signing Algorithm: SHA-256 with RSA

Other updates:

• Add a System Notification to close #814
• Common Policy Playbook Updates:
  • Added more clarity surrounding when intermediate CA certificates should be distributed
  • Added an additional reference to the Entrust link certificate on Step 6 (distribute intermediate CA certificates) for improved visibility
  • Added the next webinar date (planned for 2/17/21)
  • Added RHEL trust store configuration instructions provided by DOI (#827)

[ryancdickson]

Based on the time of day, I noticed the Crawler ran again (using FCPCA as the center node) and over-wrote the version using the new Federal Common Policy CA G2. Corrected in this updated PR. Sorry!

[ryancdickson]

@idmken - I'm going to work in a few additional updates after a conversation with Treasury today - in addition to the graph JavaScript issue we also discussed today.

I'll re-open once complete.