1763177 - Add Commscope Root Certificates

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task, P3)

Description

[Ben Wilson]

"Our PKI website is www.pki-center.com and our overall company website is www.commscope.com. Our CP/CPS, subscriber and relying party agreements are public and can be found at: http://certificates.pkiworks.com/Public/Documents/.
Only the CAs listed under "CA/Browser Forum ecosystem" in the CPS (section 7.1) are part of our inclusion request to Mozilla for issuing HTTPS server certificates."

Comment 1

[Alexander (Sasha) Medvinsky]

Attachment: CommScope CA self-assessment

Comment 2

[Alexander (Sasha) Medvinsky]

Attachment: CA compliance updated self-assessment following legal review of creative commons IPR policy

This is a minor update to previous self-assessment. Legal approved creative commons license to our CP/CPS as stated in https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#33-cps-and-cpses

Comment 3

[Alexander (Sasha) Medvinsky]

Mozilla Root Inclusion Case Information:
https://ccadb-public.secure.force.com/mozilla/PrintViewForCase?CaseNumber=00000923

Comment 4

[Ben Wilson]

Applicant needs to complete root certificate information for all requested roots in the CCADB using an "Add/Update Root Request" case - https://www.ccadb.org/cas/updates. It also needs to submit a value statement - https://wiki.mozilla.org/CA/Quantifying_Value.

Comment 5

[Nicol So]

A value statement was submitted to CCADB on 2023-01-13.

Comment 6

[Ben Wilson]

The URL is https://www.pki-center.com/Content/Mozilla%20Value%20Proposition%20Released.pdf

Comment 7

[Ben Wilson]

Today I reviewed the "Print View" and emailed Nicol So re: items that need to be filled in with an "Add/Update Root Request" case.

Comment 8

[Ben Wilson]

Public discussion began today on the CCADB Public list - https://groups.google.com/a/ccadb.org/g/public/c/HVwBXDw6GnU/m/1LsNC19RAQAJ

Comment 9

[Ben Wilson]

Public discussion closed today on the CCADB list - https://groups.google.com/a/ccadb.org/g/public/c/HVwBXDw6GnU/m/q2WRYe_TBQAJ. I have not yet performed a thorough review of the Commscope CPS, and so I will begin reviewing CPS v. 2.7 now and provide Commscope with my comments here.

Comment 10

[Ben Wilson]

Attachment: CommScope-April-2022-submission-to-Mozilla-v2-reviewed.xlsx

I've reviewed the Commscope CP/CPS and the compliance self-assessment from April 2022. They are acceptable.

Comment 11

[Ben Wilson]

Today, I posted an "intent to approve" this request to the Mozilla dev-security-policy list. https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/mXYm2D04v10/m/WGE5M4XsBgAJ. This begins a 7-day "last call" for objections.

Comment 12

[Ben Wilson]

As per Comment #11, and on behalf of Mozilla, I approve this request from Commscope to include the following root certificates:

** CommScope Public Trust ECC Root-01 (Websites)
** CommScope Public Trust ECC Root-02 (Websites)
** CommScope Public Trust RSA Root-01 (Websites)
** CommScope Public Trust RSA Root-02 (Websites)

I will file the NSS bug for the approved changes.

Comment 13

[Ben Wilson]

I have filed Bug #1860670 for the NSS changes.

Comment 14

[Andrew]

Test URIs is not works.

Comment 15

[Ben Wilson]

Links work as of Firefox 121, which is currently in Beta. Test websites appear to work per https://crt.sh/test-websites.