1754890 - Add Two D-TRUST 2020 root certificates to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Kathleen Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by D-TRUST.

Friendly Name: D-TRUST BR Root CA 1 2020
Cert Location: https://www.d-trust.net/cgi-bin/D-TRUST_BR_Root_CA_1_2020.crt
SHA-1 Fingerprint: 1F5B98F0E3B5F7743CEDE6B0367D32CDF4094167
SHA-256 Fingerprint: E59AAA816009C22BFF5B25BAD37DF306F049797C1F81D85AB089E657BD8F0044
Trust Flags: Websites
Test URL: https://certdemo-ov-valid.tls.d-trust.net/

Friendly Name: D-TRUST EV Root CA 1 2020
Cert Location: https://www.d-trust.net/cgi-bin/D-TRUST_EV_Root_CA_1_2020.crt
SHA-1 Fingerprint: 61DB8C2159690390D87C9C128654CF9D3DF4DD07
SHA-256 Fingerprint: 08170D1AA36453901A2F959245E347DB0C8D37ABAABC56B81AA100DC958970DB
Trust Flags: Websites
Test URL: https://certdemo-ev-valid.tls.d-trust.net/

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1679256 and bug #1679258

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Attachment: D-TRUST_BR_Root_CA_1_2020.crt

Comment 2

[Kathleen Wilson]

Attachment: D-TRUST_EV_Root_CA_1_2020.crt

Comment 3

[Kathleen Wilson]

Enrico, Please see step #1 above.

Comment 4

[Enrico Entschew]

I hereby confirm that all the data in this bug is correct, and that the correct certificates have been attached.

Thanks, Enrico

Comment 5

[John Schanck [:jschanck]]

Attachment: Bug 1754890 - Add two D-TRUST 2020 root certificates. r=KathleenWilson

Depends on D141920

Comment 6

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/f63fb86db692f9ea6f97d86e5b97c3dda4916ad0