1836258 - Add D-TRUST BR Root CA 2 2023 and D-TRUST EV Root CA 2 2023

Status: ASSIGNED

(CA Program :: CA Certificate Root Program, task, P1)

Description

[Enrico Entschew]

Steps to reproduce:

This is a request for root inclusion for D-TRUST BR Root CA 2 2023 and D-TRUST EV Root CA 2 2023.

1. D-TRUST BR Root CA 2 2023 (RSA Algorithm):
   http://www.d-trust.net/cgi-bin/D-TRUST_BR_Root_CA_2_2023.crt
   CN=D-TRUST BR Root CA 2 2023
   O=D-Trust GmbH

Together with D-TRUST BR Root CA 1 2020 (ECC Algorithm), this Root CA (RSA Algorithm) is a planned rollover for D-TRUST Root Class 3 CA 2 2009.

2. D-TRUST EV Root CA 2 2023 (RSA Algorithm)
   http://www.d-trust.net/cgi-bin/D-TRUST_EV_Root_CA_2_2023.crt
   CN=D-TRUST EV Root CA 2 2023
   O=D-Trust GmbH

Together with D-TRUST EV Root CA 1 2020 (ECC Algorithm), this Root CA (RSA Algorithm) is a planned rollover for D-TRUST Root Class 3 CA 2 EV 2009.

Comment 1

[Enrico Entschew]

Attachment: PKI-Hierarchy_TLS BR Rollover with RSA.pdf

Comment 2

[Enrico Entschew]

D-TRUST BR Root CA 2 2023 has the CCADB root inclusion request case number 00001363. D-TRUST EV Root CA 2 2023 has the CCADB root inclusion request case number 00001362.

Comment 3

[Enrico Entschew]

Attachment: PKI-Hierarchy_TLS EV Rollover with RSA.pdf

Comment 4

[Enrico Entschew]

Here is the link of the current Audit Attestation Letter regarding the two root CAs:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/AA2023062801_D-Trust_Root_Ceremony_2023-05_PIT.pdf

Comment 5

[Enrico Entschew]

Overview of the test websites of D-TRUST BR Root CA 2 2023
Valid: https://certdemo-dv-valid-rsa.tls.d-trust.net/
Revoked: https://certdemo-dv-revoked-rsa.tls.d-trust.net/
Expired: https://certdemo-dv-expired-rsa.tls.d-trust.net/

Overview of the test websites of D-TRUST EV Root CA 2 2023
Valid: https://certdemo-ev-valid-rsa.tls.d-trust.net/
Revoked: https://certdemo-ev-revoked-rsa.tls.d-trust.net/
Expired: https://certdemo-ev-expired-rsa.tls.d-trust.net/

Comment 6

[Enrico Entschew]

The self assessment report of 2023 can be found here:
https://bugzilla.mozilla.org/show_bug.cgi?id=1862664