617179 - DigiCert 2048 Root and ECC Root Inclusion Request

Status: RESOLVED DUPLICATE of bug 908827

(CA Program :: CA Certificate Root Program, task)

Description

[Jeremy Rowley]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.215 Safari/534.10
Build Identifier: 

DigiCert would like to add its SHA256 and ECC roots to the NSS store.  The SHA-1 version of the Global Root CA is already included in the NSS store per bug #364568.  The ECC root is new but is the equivalent of DigiCert's High Assurance EV root CA certificate.

Both roots are used to issue intermediate and end-entity SSL, email, and code signing certificates. Both roots include the digital signature, certificate singing, off-line CRL signing, and CRL signing key usage extensions.  Both roots are used with EV Certificates.

DigiCert's CP is available at http://www.digicert.com/http://www.digicert.com/DigiCert_CP_v401.pdf.

DigiCert's CPS is available at http://www.digicert.com/DigiCert_CPS_v401.pdf.

The certificate details are as follows:

ECC:
Signature algorithm = sha384ECDSA
Subject CN = DigiCert High Assurance Root CA (ECC)
        OU = www.digicert.com
        O = DigiCert Inc
        C = US
Valid from = Wednesday, May 05, 2010 6:00:00 PM
Valid to = Tuesday May 05, 2037 6:00:00 PM
SHA-1 Thumbprint = ‎d2 ab 41 9a 5c 14 48 9d 66 f8 03 b4 bc 66 27 9c 62 0a c0 0a

SHA256:

Signature algorithm = sha256RSA
Subject CN = DigiCert Global Root CA (ECC)
        OU = www.digicert.com
        O = DigiCert Inc
        C = US
Valid from = Thursday, Nov 9, 2006 6:00:00 PM
Valid to = Sunday Nov 9, 2031 6:00:00 PM
SHA-1 Thumbprint = ‎‎b6 7e 28 2c cb 89 0d 57 a6 91 96 9e 2c 33 f1 55 61 e0 89 75

DigiCert's EV Policy OID 2.16.840.1.114412.2.1

Reproducible: Always

Comment 1

[Kathleen Wilson]

I'll start the info gathering and verification phase.
https://wiki.mozilla.org/CA:How_to_apply#Information_gathering_and_verification

Comment 2

[Kathleen Wilson]

Please provide the download url for both of these roots.

Comment 3

[Kathleen Wilson]

Attachment: Initial Information Gathering Document

The attached document summarizes the information that has been gathered and
verified.

The items highlighted in yellow indicate where further information or
clarification is needed. Please review the full document for accuracy and
completeness.

Comment 4

[Kathleen Wilson]

Jeremy, Please provide an update to comment #3.