CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #TBD: Add Re-Signed GTS Roots * Bug #TBD: Add Chunghwa Telecom's HiPKI Root CA -G1 Certificate Removals: * Bug# TBD: Remove prior versions of the GTS Roots * Bug #TBD: Remove expired root certificates ** DST Root CA X3 (Websites), ValidTo 2021.09.30 ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign (Websites, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
Bug 1733003 Comment 0 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #TBD: Add Re-Signed GTS Roots * Bug #1733012: Add Chunghwa Telecom's HiPKI Root CA -G1 Certificate Removals: * Bug# TBD: Remove prior versions of the GTS Roots * Bug #TBD: Remove expired root certificates ** DST Root CA X3 (Websites), ValidTo 2021.09.30 ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign (Websites, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Add Chunghwa Telecom's HiPKI Root CA -G1 Certificate Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug# TBD: Remove prior versions of the GTS Roots * Bug #TBD: Remove expired root certificates ** DST Root CA X3 (Websites), ValidTo 2021.09.30 ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign (Websites, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug# TBD: Remove prior versions of the GTS Roots * Bug #TBD: Remove expired root certificates ** DST Root CA X3 (Websites), ValidTo 2021.09.30 ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign (Websites, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #TBD: Remove expired root certificates ** DST Root CA X3 (Websites), ValidTo 2021.09.30 ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign (Websites, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #TBD: Remove expired root certificates ** DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 ** Cybertrust Global Root (Websites - EV), ValidTo 2021.12.15 ** GlobalSign, SN 0400000000010F8626E60D (Websites - not EV, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #TBD: Remove expiring root certificates ** Cybertrust Global Root (Websites - EV), ValidTo 2021.12.15 ** GlobalSign, SN 0400000000010F8626E60D (Websites - not EV, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #TBD: Remove expiring root certificates ** Cybertrust Global Root (Websites - EV), ValidTo 2021.12.15 -- Depends on Bug #1738809 (EV removal) ** GlobalSign, SN 0400000000010F8626E60D (Websites - not EV, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. List To Be Finalized: **TBD** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #TBD: Remove expiring root certificates ** Cybertrust Global Root (Websites - EV), ValidTo 2021.12.15 -- Depends on Bug #1738809 (EV removal) ** GlobalSign, SN 0400000000010F8626E60D (Websites - not EV, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. **List To Be Finalized: December 3, 2021** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #TBD: Remove expiring root certificates ** Cybertrust Global Root (Websites - EV), ValidTo 2021.12.15 -- Depends on Bug #1738809 (EV removal) ** GlobalSign, SN 0400000000010F8626E60D (Websites - not EV, Email), ValidTo 2021.12.15 (Note to self: check with CA on this one re Email, may just want to only remove the Websites trust bit) Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. **List To Be Finalized: December 3, 2021** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #1740807: Remove Expiring Cybertrust Global Root and GlobalSign root certificates from NSS ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign, SN 0400000000010F8626E60D (Websites, Email), ValidTo 2021.12.15 Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. **List To Be Finalized: December 3, 2021** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA * Bug #1741930: renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #1740807: Remove Expiring Cybertrust Global Root and GlobalSign root certificates from NSS ** Cybertrust Global Root (Websites), ValidTo 2021.12.15 ** GlobalSign, SN 0400000000010F8626E60D (Websites, Email), ValidTo 2021.12.15 Trust Bit Changes: * TBD Distrust After Changes: * TBD
CA Program requested root changes for NSS in December, 2021. **List Finalized: November 30, 2021** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA * Bug #1741930: renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #1740807: Remove Expiring Cybertrust Global Root and GlobalSign root certificates from NSS -- Cybertrust Global Root (Websites), ValidTo 2021.12.15 -- GlobalSign, SN 0400000000010F8626E60D (Websites, Email), ValidTo 2021.12.15 Additional Trust Bit Changes: * None Distrust After Changes: * None
CA Program requested root changes for NSS in December, 2021. **List TO BE Finalized: December 3, 2021** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA * Bug #1741930: renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 Replacements: * Bug #1735407: Re-Signed GTS Roots [THIS ITEM NEEDS FURTHER DISCUSSION] Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #1740807: Remove Expiring Cybertrust Global Root and GlobalSign root certificates from NSS -- Cybertrust Global Root (Websites), ValidTo 2021.12.15 -- GlobalSign, SN 0400000000010F8626E60D (Websites, Email), ValidTo 2021.12.15 Additional Trust Bit Changes: * None Distrust After Changes: * None
CA Program requested root changes for NSS in December, 2021. **List Finalized: December 2, 2021** Additions: * Bug #1733012: Chunghwa Telecom's HiPKI Root CA -G1 * Bug #1738805: ISRG Root X2 * Bug #1740095: iTrusChina's vTrus Root CA and vTrus ECC Root CA * Bug #1741930: renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 Replacements: * Bug #1735407: Re-Signed GTS Roots Removals: * Bug #1733560: Remove expired DST Root CA X3 (Websites - not EV), ValidTo 2021.09.30 * Bug #1740807: Remove Expiring Cybertrust Global Root and GlobalSign root certificates from NSS -- Cybertrust Global Root (Websites), ValidTo 2021.12.15 -- GlobalSign, SN 0400000000010F8626E60D (Websites, Email), ValidTo 2021.12.15 Additional Trust Bit Changes: * None Distrust After Changes: * None