1688854 - Add TrustAsia root certificates

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task, P3)

Description

[TrustAsia]

Attachment: Point_in_Time_Final_Report.zip

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36 Edg/88.0.705.50

Steps to reproduce:

Apply for inclusion of Mozilla’s root program

Expected results:

Process for TrustAsia's application for inclusion of Mozilla’s root program

Comment 1

[TrustAsia]

TrustAsia Technologies,Inc.(TrustAsia) is a high-tech enterprise focusing on network security, with more than ten years of experience in the field of HTTPS security, and has rich experience and profound accumulation in security product development and security solution design. Our SSL certificates cover a wide range of Chinese markets. Currently, the company has one patent for security invention.

TrustAsia is the leading SSL certificate issuing and service company in China. We also have the world's leading VSign Code Signing System, TrustAsia brand SSL certificate and a series of network information security management solutions.

We apply for inclusion of Mozilla's Root Program.

Comment 2

[TrustAsia]

Attachment: TrustAsia_ CA's Baseline Requirements Self Assessment

Comment 3

[Ben Wilson]

Root inclusion case #753 has been created in the CCADB
Public review of this matter in the CCADB is available here:
https://ccadb-public.secure.force.com/mozilla/PrintViewForCase?CaseNumber=00000753
TrustAsia may access and update the case information here:
https://ccadb.force.com/5004o00000KFnB4AAL (Case #753)

Comment 4

[Ben Wilson]

Do you have any updated period-of-time audit information?

Comment 5

[TrustAsia]

Hi Ben,

Our POT audit has been completed and reports have been issued in September. The reports have been submitted to CPA Canada then but seals are still not available yet due to the extended processing time of CPA Canada. We are still waiting for the processing of CPA Canada for seals.

Comment 6

[TrustAsia]

Attachment: TrustAsia_PIT_KGC_Report.zip

Comment 7

[TrustAsia]

Attachment: TrustAsia-Compliance-Self-Assessment-2022.xlsx

Comment 8

[TrustAsia]

TrustAsia wants to apply for the inclusion of two new root certificates in the Mozilla root store.

Root inclusion case #914 has been created in the CCADB.
Root Store Operators may access this page via:
https://ccadb.my.salesforce.com/5008Z00001sdavXQAQ
Mozilla Root Inclusion Case Information:
https://ccadb-public.secure.force.com/mozilla/PrintViewForCase?CaseNumber=00000914

Comment 9

[Ben Wilson]

Due to problems with the way that Case #914 was created in the CCADB, I had to create Case #921 - https://ccadb.force.com/5008Z00001tCYvtQAG
https://ccadb-public.secure.force.com/mozilla/PrintViewForCase?CaseNumber=00000921. The information from Case #914 will be copied over.

Comment 10

[TrustAsia]

Attachment: TrustAsia-Compliance-Self-Assessment_BR1.8.6_CPS1.6_20221216.xlsx

Comment 11

[TrustAsia]

Attachment: QUANTIFYING VALUE-TRUSTASIA.pdf

Comment 12

[Ben Wilson]

Can you upload sample S/MIME certificates as attachments to this bug?
Thanks,
Ben

Comment 13

[TrustAsia]

Attachment: smime_mv.cer

Comment 14

[TrustAsia]

Attachment: smime_sv.cer

Comment 15

[Ben Wilson]

Attachment: Mozilla-Review-of-TrustAsia-Compliance-Self-Assessment_BR1.8.6_CPS1.6.1.xlsx

Comment 16

[Ben Wilson]

Public discussion started today and runs through August 16, 2023, https://groups.google.com/a/ccadb.org/g/public/c/KHaSShYA-eY/m/toe8FHpnAwAJ

Comment 17

[Ben Wilson]

Public discussion ended yesterday - see https://groups.google.com/a/ccadb.org/g/public/c/KHaSShYA-eY/m/D7J6ycgZAgAJ

Comment 18

[Ben Wilson]

I am recommending approval of TrustAsia's request to include two root CA certificates with both the websites and email trust bits and EV-enablement. https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/3mAiS5jIkNw/m/48s3BKmuAgAJ

Comment 19

[Kathleen Wilson]

As per Comment #18, and on behalf of Mozilla I approve this request from TrustAsia Technologies, Inc. to include the following root certificates:

** TrustAsia Global Root CA G3 (Email, Websites); EV
** TrustAsia Global Root CA G4 (Email, Websites); EV

I will file the NSS and PSM bugs for the approved changes.

Comment 20

[Kathleen Wilson]

I have filed bug #1850598 against NSS and bug #1850599 against PSM for the actual changes.

Comment 21

[Ben Wilson]

These roots are in NSS and are now in PSM pending EV enablement.

Comment 22

[Ben Wilson]

Verified EV in Nightly 122.0a1 (2023-11-30)