1651211 - Remove SK ID Solutions' EE Certification Centre Root certificate from NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, enhancement)

Description

[Kathleen Wilson]

Please remove the following root certificate from NSS.

Subject: CN=EE Certification Centre Root CA; O=AS Sertifitseerimiskeskus; C=EE
Certificate Serial Number: 5480F9A073ED3F004CCA89D8E371E64A
SHA-1 Fingerprint: C9A8B9E755805E58E35377A725EBAFC37B27CCD7
SHA-256 Fingerprint: 3E84BA4342908516E77573C0992F0979CA084E4685681FF195CCBA8A229B8A76
Mozilla Trust Bits: Websites
Not EV

The CA reports that the last TLS certificate chaining up to this root expires on September 29, 2020.

Comment 1

[Mihkel Tammsalu]

Can You please clarify the date when the chnage in NSS will happen? Our last certificate will expire in September 29, 2020. According to https://bugzilla.mozilla.org/show_bug.cgi?id=1649942 we agreed that let last TLS certificates expire, and there in no need for revocation as the date are so close by.

Comment 2

[Ben Wilson]

The answer depends on whether the September batch of root changes gets into NSS 3.57. If the change gets into NSS 3.57, then root removal would occur in Firefox 82, which is currently scheduled to go into Beta on September 22, and release on October 20. See https://wiki.mozilla.org/NSS:Release_Versions and https://wiki.mozilla.org/Release_Management/Calendar. Otherwise, it would likely go into Firefox 83 which goes to Beta on October 20 and final release on November 17.

Comment 3

[Mihkel Tammsalu]

Are there any indications in which release the removal the root changes will be deployed? This would be crucial to know for us, as we need to make communication to our partners.

Comment 4

[Kathleen Wilson]

We are planning for the changes to go into NSS 3.57, which is planned to go into Firefox 82, which is currently scheduled to go into Beta on September 21, and release on October 20.

Comment 5

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1651211 - Remove EE Certification Centre Root CA root cert. r?KathleenWilson,jcj

Comment 6

[Kevin Jacobs [:kjacobs]]

https://hg.mozilla.org/projects/nss/rev/089aeca370df1ff1d1c7e0dad9237fadd499ae2e