1738805 - Add ISRG Root X2 root certificate to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Kathleen Wilson]

Attachment: isrg-root-x2.pem

This bug requests inclusion in the NSS root store of the following root certificates owned by Internet Security Research Group (ISRG).

Friendly Name: ISRG Root X2
Cert Location: https://letsencrypt.org/certs/isrg-root-x2.pem
SHA-1 Fingerprint: BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA-256 Fingerprint: 69729B8E15A86EFC177A57AFB7171DFC64ADD28C2FCA8CF1507E34453CCB1470
Trust Flags: Websites
Test URL: https://valid-isrgrootx2.letsencrypt.org

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1701317

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificate has been attached.
2. A Mozilla representative creates a patch with the new certificate.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Josh, Please see step #1 above.

Comment 2

[Josh Aas]

We have confirmed that the information here is correct.

Comment 3

[John Schanck [:jschanck]]

Attachment: Bug 1738805 - Add ISRG Root X2 root certificate to NSS. r=KathleenWilson

Comment 4

[Benjamin Beurdouche [:beurdouche]]

https://hg.mozilla.org/projects/nss/rev/7445fee9bab81281caeed007fa55d5091ca8a85c