1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs from NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Kathleen Wilson]

Please remove the following two root certificates from NSS.
The CA, DigiCert, has confirmed that these roots are ready to be removed as per the continuation of the distrust of Symantec root certificates.

GeoTrust Primary Certification Authority - G2
Serial Number 3CB2F4480A00E2FEEB243B5E603EC36B
SHA-1 Fingerprint 8D1784D537F3037DEC70FE578B519A99E610D7B0
SHA-256 Fingerprint 5EDB7AC43B82A06A8761E8D7BE4979EBF2611F7DD79BF91C1C6B566A219ED766

VeriSign Universal Root Certification Authority
Serial Number 401AC46421B31321030EBBE4121AC51D
SHA-1 Fingerprint 3679CA35668772304D30A5FB873B0FA77BB70D54
SHA-256 Fingerprint 2399561127A57125DE8CEFEA610DDF2FA078B5C8067F4E828290BFB860E84B3C

Comment 1

[Kathleen Wilson]

Brenda, Please confirm that these are the correct root certificates to be removed.

Comment 2

[Brenda Bernal]

Confirming the two are correct to be removed.

Comment 3

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs from NSS. r=KathleenWilson

Comment 4

[Benjamin Beurdouche [:beurdouche]]

https://hg.mozilla.org/projects/nss/rev/9718a34c84429b1e5dc66a22c13e97ad169721dc