Closed Bug 1402158 Opened 7 years ago Closed 7 years ago

Add Certinomis Cross-Signed StartCom certs to OneCRL

Categories

(CA Program :: CA Certificate Root Program, task)

task
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: kwilson, Assigned: mgoodwin)

References

Details

(Whiteboard: [ca-onecrl])

Please add the following two certificates to OneCRL.

Issuer commonName: Certinomis - Root CA

https://crt.sh/?id=182884216
Certificate Serial Number: 67b9b0973e0d036b3ef1d9f04734ff46f2bd6594
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

https://crt.sh/?id=182884215
Certificate Serial Number: 5aed253a6e64ca53f9b8ebba99de319960b702d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Background:
https://bugzilla.mozilla.org/show_bug.cgi?id=1386891
https://groups.google.com/d/msg/mozilla.dev.security.policy/hNOJJrN6WfE/EjfeU-LFAAAJ
Blocks: 1386891
Hello

we do plan to revoke these certs during next keyceremony planned in October.


Best regards
Franck Leroy
Depends on: 1402977
I confirm that these have been added to OneCRL.

Franck, After you revoke these certs, please update the 'Revocation Status' for their records in the Common CA Database.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Product: NSS → CA Program
You need to log in before you can comment on or make changes to this bug.