1794584 - Add NETLOCK RSA4096 Root

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task, P3)

Description

[Anna Bányai]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Steps to reproduce:

We decided to set up a new CA based on RSA 4096 algorithm which we would like to include in the root program.

Actual results:

It was tested in our last conformity assessment audit in 2022 by our auditor (MATRIX Tanúsító Ltd.) and was included in the Audit Attestation letter.

CN = NETLOCK Root CA RSA4096, O = NetLock Kft.
C = HU

SHA256 fingerprint
92F0D139DC223E4C6AF7FC101637F642B9534F07C326860EADD7A65BD4DAF8A3

-----BEGIN CERTIFICATE-----
MIIFfzCCA2egAwIBAgIOYIu5YAAQJl/zWhX95vowDQYJKoZIhvcNAQELBQAwWTEL
MAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxORVRMT0NL
IEtmdC4xIDAeBgNVBAMMF05FVExPQ0sgUm9vdCBDQSBSU0E0MDk2MB4XDTIxMDQz
MDA4MDEzNloXDTQxMDQyNTA4MDEzNlowWTELMAkGA1UEBhMCSFUxETAPBgNVBAcM
CEJ1ZGFwZXN0MRUwEwYDVQQKDAxORVRMT0NLIEtmdC4xIDAeBgNVBAMMF05FVExP
Q0sgUm9vdCBDQSBSU0E0MDk2MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA11cH/pW4P5FUkUmjbedR4DEGecryzLnSvV4wwY7OE8VCxQFbsW77lZQ7D3cI
Rx2w8srs8AIwWnch1PCI52ZQuc9MtVP6OpgYSxrLoSas5styilan5pOGWU/kUypy
kfeiObSwv+DY+MGDCKIabJ4YhJUBXPKlTooGhAY3TNZxTr1EGwNHc+zeIjMmOoAo
I19potEaYFdTsBTtO3jbPrwfa07GXcbG9S1BWp7BlaS18hKZoFSqaMpLVdV9wP6f
KwZ4ffYzIMC8fpWKPXhl6wTaUXXU7WOZO0tU6Jvk2RZ/wlZF5BQFCeKkwofDO2cD
GCXFKas1CCGZ3DS1SBw009XcnQrY9ac8kgwiOa95GBiaIVdo0o99jsUpe9Rev4ax
ZTMxkP0MKh1Sujro1q0MNR7+b/0Mwwj3tEUGNY7lzidACkOBk6CUC4LE5dvW27HO
0lmbIOWp/z+mw1qFaWSYCxFyTfxJ/ruvPtL3a5skp68FAtk28OSsneROOAfvmtao
P7fzfbkG0bsqBSmcS8busGKFKD9cbrEcstzkIIyvnbNaFUhNgHTiuRgkQ9APNUdG
vWs8phYldln6jjI7SG1psbtxWIKix1GlS6JMPijVazCf9xd+aWLONwkGH7fJQtiB
SGVo8KVSa2u1/BxxeOBijssqJXxseBVdZ859xIXyu3eB3DMCAwGQIaNFMEMwEgYD
VR0TAQH/BAgwBgEB/wIBBDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPK7tW0y
hE5iCmQxeiUrOVOR7WmMMA0GCSqGSIb3DQEBCwUAA4ICAQBki+strRMfEIUaf/jC
3PGq9wiENf+rTdXzC1JIigj9rszYBu+xJeSRGF0hfCGWgvDSYo0ZtRCzw2w/e0xs
hcHQ/UkStHI4caTTRu5x9DQ6IyI+CggB74mBfjseROHjOyyFPhWe2sDZ4bpmawwo
2lm/Jaxt+eaAtfQN4MUExrwW2iwXsJC0YMXM5deUZDCkZiGIK75jcOzrD0EmJblr
7TbgPxqawWfkP0xXHy1C5UniaQOTnpUKN1f8wiYZVIPo4L0HiIBImQEJLB0BsZSP
PeKGRINu2ZChsrv+uXYVUVx6mMHL8D6hqep7YOd/6qGSCGji1p2xDlzEGSV8F98E
WgWxN77m3oEusbxZimryFOLXkVo7XjaPU060C8BDssMeGX6o5cG7ZCShpYl4nRgc
pcWPmbUM/x37I0jfWGPMmYKk3EMs0ADQ1KPupj2srSL1sDTYQ5c8Oc8fVBxqTya9
NIuBPEGPZ/ciHcUOPzBScPo9njjjLJL0CvMpY8XAVPXzF/Di65mq7qGXOgnoA2q1
ayGKBu3AQhbH8t+6R3OayMeu26l6nc4LWyj2z7Swwe0aiMIu2cffatv2FG2/QplP
ozyf1vvNFtiYtwmpu1Yr5NTR44hrEYKE2pX1EUB0I2zsL+tRZnKbIuRqQDAoQKfY
WEqh164fjv89/1H4/cTJCqXcgw==
-----END CERTIFICATE-----

Expected results:

Please include this new root certificate in your root certificate program and CCADB.

Comment 1

[Ben Wilson]

I have added the root certificate to the CCADB. Netlock will now need to complete all CCADB information related to this new root CA record.

Comment 2

[Anna Bányai]

Attachment: I-NL22T_TAN-AAL-01_v3_signed.pdf

AUDIT ATTESTATION LETTER FOR NETLOCK LTD.

Comment 3

[Anna Bányai]

Dear Ben!

NETLOCK's service portfolio is currently under review, with the aim of optimising the existing trust services and solutions and improving their operation.
The optimisation process has involved the replacement of hardware devices, however, due to supply chain constraints and slow procurement, we are unable to provide the necessary hardware resources to provide the mandatory services (eg. CRL, OCSP) for the new root certificates, and have therefore decided to close the enrolment tickets for the new root certificates until the devices are procured and arrive.
Once the necessary infrastructure is in place, we intend to restart the enrolment of new certificates.

Is it sufficient to set the status of the bugzilla.mozilla tickets to INVALID, or is there something else we need to do?

Than you! Anna

Comment 4

[Ben Wilson]

Greetings,
Can Netlock provide an update on whether they want to pursue this inclusion request?
Thanks,
Ben

Comment 5

[Tamás Horváth]

Hello Ben!

No, we would like to close this request, and we will be submitting a different reoot for inclusion.

Thanks! Tamas