1759815 - Remove "Hellenic Academic and Research Institutions RootCA 2011" root certificate from NSS

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task)

Description

[Dimitris Zacharopoulos]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0

Steps to reproduce:

Turn off Trust Bit(s) for Hellenic Academic and Research Institutions RootCA 2011 root cert

Actual results:

• Subject/Issuer: C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011
• SHA256 Fingerprint: bc104f15a48be709dca542a7e1d4b9df6f054527e802eaa92d595444258afe71
• Specify the change: Turn-off Websites and email trust bits
• Reason for requesting this change: Subscribers have migrated to other HARICA hierarchies
• Impact that the change may have on Mozilla users: None expected

Comment 1

[Dimitris Zacharopoulos]

CCADB entry: https://ccadb.force.com/s/account/001o000000HshF8AAJ/hellenic-academic-and-research-institutions-rootca-2011

Comment 2

[Kathleen Wilson]

For this request, please remove the "Hellenic Academic and Research Institutions RootCA 2011" root certificate from NSS.

Root Certificate to be removed:
Subject: CN=Hellenic Academic and Research Institutions RootCA 2011; O=Hellenic Academic and Research Institutions Cert. Authority; C=GR
Certificate Serial Number: 00
SHA-1 Fingerprint: FE45659B79035B98A161B5512EACDA580948224D
SHA-256 Fingerprint: BC104F15A48BE709DCA542A7E1D4B9DF6F054527E802EAA92D595444258AFE71

This root certificate is NOT enabled for EV treatment.

Comment 3

[Kathleen Wilson]

I have added this to the June 2022 batch of root changes meta bug: Bug #1764206

Comment 4

[Dennis Jackson]

Attachment: Bug 1759815 - Remove Hellenic Academic 2011 Root. r=#nss-reviewers

Depends on D148828

Comment 5

[Dennis Jackson]

https://hg.mozilla.org/projects/nss/rev/9c2cbf14f6a5409f7c47964046f7ac9bca819737