1908004 - Add Taiwan CA Roots to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by Taiwan CA:

Root Certificate 1 of 2
Friendly Name - TWCA CYBER Root CA
Certificate Location - https://itax.twca.com.tw/cacert/TWCA_Cyber_RCA_cert.zip
SHA-1 Fingerprint - F6B11C1A8338E97BDBB3A8C83324E02D9C7F2666
SHA-256 Fingerprint - 3F63BB2814BE174EC8B6439CF08D6D56F0B7C405883A5648A334424D6B3EC558
Trust Flag - Websites
Test URL - https://cyberevnormal.twca.com.tw/

Root Certificate 2 of 2
Friendly Name - TWCA Global Root CA G2
Certificate Location - https://itax.twca.com.tw/cacert/TWCA_Global_RCA_G2_cert.zip
SHA-1 Fingerprint - 73FE922F836391FFC8C6C4DAD6202F6B072E7F1B
SHA-256 Fingerprint - 3A0072D49FFC04E996C59AEB75991D3C340F3615D6FD4DCE90AC0B3D88EAD4F4
Trust Flag - Email

These CA certificates have been assessed in accordance with the Mozilla project guidelines, and the certificates have been approved for inclusion in bug #1849702.

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Ben Wilson]

Attachment: TWCA-CYBER-Root-CA-PEM.crt

Comment 2

[Ben Wilson]

Attachment: TWCA-Global-Root-CA-G2-PEM.crt

Comment 3

[Hao-Chun Li]

Hi,
We have confirmed that all the data in this bug and the attached certificates are correct.
Thank you!

Comment 4

[John Schanck [:jschanck]]

Attachment: Bug 1908004 - Add Taiwan CA Roots to NSS. r=bwilson

Comment 5

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/ca7b8d0a00658a13eab60fce712c16edb1e1466a