1707097 - Add Certum root certs owned by Asseco to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Kathleen Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by Asseco Data Systems S.A. (previously Unizeto Certum).

Friendly Name: Certum EC-384 CA
Cert Location: https://repository.certum.pl/cec384ca.pem
SHA-1 Fingerprint: F33E783CACDFF4A2CCAC67556956D7E5163CE1ED
SHA-256 Fingerprint: 6B328085625318AA50D173C98D8BDA09D57E27413D114CF787A0F5D06C030CF6
Trust Flags: Email; Websites
Test URL: https://valid-cec384ca.certificates.certum.pl

Friendly Name: Certum Trusted Root CA
Cert Location: http://repository.certum.pl/ctrca.pem
SHA-1 Fingerprint: C88344C018AE9FCCF187B78F22D1C5D74584BAE5
SHA-256 Fingerprint: FE7696573855773E37A95E7AD4D9CC96C30157C15D31765BA9B15704E1AE78FD
Trust Flags: Email; Websites
Test URL: https://valid-ctrca.certificates.certum.pl/

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1598577

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificates. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Attachment: cec384ca.pem

Comment 2

[Kathleen Wilson]

Attachment: ctrca.pem

Comment 3

[Kathleen Wilson]

Wojciech, Please see step #1 above.

Comment 4

[Wojciech Trapczyński]

I confirm that all the data in this bug is correct, and that the correct certificates have been attached.

Comment 5

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1707097 - Add Certum EC-384 CA to NSS. r=KathleenWilson

Depends on D115889

Comment 6

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1707097 - Add Certum Trusted Root CA to NSS. r=KathleenWilson

Depends on D115890

Comment 7

[Benjamin Beurdouche [:beurdouche]]

https://hg.mozilla.org/projects/nss/rev/171e74b54ca4a976a32dfd694ac8fc785dbb70c4
https://hg.mozilla.org/projects/nss/rev/4f4982362348f2ecb0864791ee581abb0b35ca3c