kevgliss

Not today, but would be happy to accept a PR setting a default issuer.

For authorities, these are typically configured via the plugin itself: http://lemur.readthedocs.io/en/latest/administration.html#plugin-specific-options You can typically configure which root/intermediate you need from your CA. When you create an authority for that plugin...

I believe `VERISIGN_INTERMEDIATE` and `VERISIGN_ROOT` both need to be set, and be pem formatted strings. You can easily do `open('path-to-pem', 'r').readlines()` if thats what if you prefer.

1) Setting those files only allows the plugin to work, you still need to create an authority and select that plugin. 2) The values need to be PEM strings not...

I think you want `readlines()` not `read()` as you actually want the whole file read.

You will likely have to re-create the authority as it probably wasn't set correctly.

+1 Would be super cool if you had the time or the inclination to wrap the above into a cli command!

It looks like your certificate does not have a CRL in it to check, so it can't be determined if it's been revoked. Is it perhaps an internal certificate?

We could catch the exception and issue a warning instead. I'd be happy to merge a PR covering that use case.

Are you using the UI or API? Is there anything in `lemur.log`?