1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Kathleen Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by TrustAsia Technologies, Inc..

Friendly Name: TrustAsia Global Root CA G3
Cert Location: https://repository.trustasia.com/repo/certs/rsa-g3/TrustAsiaGlobalRootCAG3.cer
Note: The .cer file has extra text before the PEM data
SHA-1 Fingerprint: 63CFB6C1272B56E4888E1C239AB62E814724C3C7
SHA-256 Fingerprint: E0D3226AEB1163C2E48FF9BE3B50B4C6431BE7BB1EACC5C36B5D5EC509039A08
Trust Flags: Email; Websites
Test URL: https://ev-rsag3-valid.trustasia.com

Friendly Name: TrustAsia Global Root CA G4
Cert Location: https://repository.trustasia.com/repo/certs/ecc-g4/TrustAsiaGlobalRootCAG4.cer
Note: The .cer file has extra text before the PEM data
SHA-1 Fingerprint: 5773A5615D80B2E6AC3882FC680731AC9FB5925A
SHA-256 Fingerprint: BE4B56CB5056C0136A526DF444508DAA36A0B54F42E4AC38F72AF470E479654C
Trust Flags: Email; Websites
Test URL: https://ev-eccg4-valid.trustasia.com

This CA has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1688854

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificates. This process is mostly under the control of the release drivers for those products.

Comment 1

[Kathleen Wilson]

Attachment: TrustAsia Global Root CA G3.pem

Comment 2

[Kathleen Wilson]

Attachment: TrustAsia Global Root CA G4.pem

Comment 3

[Kathleen Wilson]

Nome, Please see step #1 above.

Comment 4

[nome.huang]

Here confirming that all the data in this bug is correct, and that the correct certificates have been attached.
Thanks.

Comment 5

[Dennis Jackson]

Attachment: Bug 1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates. r=#nss-reviewers,bwilson

Comment 6

[Dennis Jackson]

https://hg.mozilla.org/projects/nss/rev/f24922aab91f7cfb33e59581dc0b5a20becbd3b2