1432959 - Remove DSV-Gruppe root certs per CA request

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kathleen Wilson]

Please remove the following root certificates from NSS.

Common Name: S-TRUST Universal Root CA
SHA-1 Fingerprint: 1B:3D:11:14:EA:7A:0F:95:58:54:41:95:BF:6B:25:82:AB:40:CE:9A
SHA-256 Fingerprint: D8:0F:EF:91:0A:E3:F1:04:72:3B:04:5C:EC:2D:01:9F:44:1C:E6:21:3A:DF:15:67:91:E7:0C:17:90:11:0A:31

Common Name: TC TrustCenter Class 3 CA II
SHA-1 Fingerprint: 80:25:EF:F4:6E:70:C8:D4:72:24:65:84:FE:40:3B:8A:8D:6A:DB:F5
SHA-256 Fingerprint: 8D:A0:84:FC:F9:9C:E0:77:22:F8:9B:32:05:93:98:06:FA:5C:B8:11:E1:C8:13:F6:A1:08:C7:D3:36:B3:40:8E

* These certs only have the Email trust bit set.

Reason for removal: 
Received email from the representative of this CA that said: "The Root CAs should be removed by 31st of May 2018. At this date the corresponding ETSI Certifiate (ETSI TS 102 042 V2.4.1 (2013-02), policy NCP+.) will expire. And it will not be renewed.
Therefore please remove the CAs by the 31st of May 2018.
All end-entity certificates not expired already by this date, will be revoked by DSV (before this date)."