1863580 - Entrust: Add Entrust and AffirmTrust Root Certificates

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task, P4)

Description

[Bruce Morton]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36

Comment 1

[Bruce Morton]

Attachment: prod_ca_aft4ktlsr2022.crt

Comment 2

[Bruce Morton]

Attachment: prod_ca_4kevtlsr2022.crt

Comment 3

[Bruce Morton]

Attachment: prod_ca_4ktlsr2022.crt

Comment 4

[Bruce Morton]

Attachment: prod_ca_p384evtlsr2022.crt

Comment 5

[Bruce Morton]

Attachment: prod_ca_p384tlsr2022.crt

Comment 6

[Bruce Morton]

Attachment: prod_ca_smimer2022.crt

Comment 7

[Bruce Morton]

Entrust requests the attached dedicated root certificates be included in NSS. Information has been provided in this CCADB Case, https://ccadb.my.site.com/s/case/5008Z00002AHrWLQA1/entrust-and-affirmtrust-dedicated-root-inclusion-request

Comment 8

[Benjamin Beurdouche [:beurdouche]]

@Ben, is there a meta bug for this ?

Comment 9

[Ben Wilson]

For enablement of the Email trust bit, for the Entrust SMIME Root CA - 2022, is there an S/MIME BRs audit or will there be one soon? If not, when is one expected? Also, can you attach a sample SMIME client certificate to this bug that chains up to the Entrust SMIME Root CA - 2022?
Thanks

Comment 10

[Bruce Morton]

The S/MIME BR audit is for the period ending 29 February 2024. The audit report will be posted before 31 May 2024.

Comment 11

[Bruce Morton]

Attachment: SMIME1_test_chain.txt.cer

Comment 12

[Bruce Morton]

Certificate has been uploaded.

Comment 13

[Ben Wilson]

Hi Bruce,
Can you provide an update on which roots you are still seeking to include and for which trust bits?
Would you rather prefer that this bug be closed and a new one opened?
Thanks,
Ben

Comment 14

[Bruce Morton]

Entrust is no longer seeking to include any of these roots in NSS.

Comment 15

[Ben Wilson]

Thanks for your response. I'll close this bug.