<- Chrome Settings Library

CertificateTransparencyEnforcementDisabledForLegacyCas

Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities
Last updated October 8, 2024
Deprecated

Setting the policy turns off enforcement of Certificate Transparency disclosure requirements for a list of Legacy Certificate Authorities (CA) for certificate chains with a specified Google Chrome, but not Android Open Source Project or Google ChromeOS. Specify a subjectPublicKeyInfo hash by linking the hash algorithm name, a slash and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. Base64 encoding format matches that of an SPKI Fingerprint. The only recognized hash algorithm is sha256; others are ignored. Leaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates. This policy was removed in Google Chrome version 128.

Supported On:
Platform Start End
Android 67 127
Chrome (Windows, Mac, Linux) 67 127
ChromeOS 67 127
Example value:

{"0":"sha256/AAAAAAAAAAAAAAAAAAAAAA==","1":"sha256//////////////////////w=="}

Features: