1908006 - Add Cybertrust Japan Roots to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by Cybertrust Japan / JCSI:

Root Certificate 1 of 3
Friendly Name - SecureSign Root CA12
Certificate Location - http://rtcrl.cybertrust.ne.jp/SecureSign/rtca12/rtca12.crt
SHA-1 Fingerprint - 7A221E3DDE1B06AC9EC84770168E3CE5F76B06F4
SHA-256 Fingerprint - 3F034BB5704D44B2D08545A02057DE93EBF3905FCE721ACBC730C06DDAEE904E
Trust Flag - Websites
Test URL - https://ss12-valid.managedpki.ne.jp

Root Certificate 2 of 3
Friendly Name - SecureSign Root CA14
Certificate Location - http://rtcrl.cybertrust.ne.jp/SecureSign/rtca14/rtca14.crt
SHA-1 Fingerprint - DD50C0F779B3642E74A2B89D9FD340DDBBF0F24F
SHA-256 Fingerprint - 4B009C1034494F9AB56BBA3BA1D62731FC4D20D8955ADCEC10A925607261E338
Trust Flag - Websites
Test URL - https://ss14-valid.managedpki.ne.jp

Root Certificate 3 of 3
Friendly Name - SecureSign Root CA15
Certificate Location - http://rtcrl.cybertrust.ne.jp/SecureSign/rtca15/rtca15.crt
SHA-1 Fingerprint - CBBA83C8C15A5DF1F9736FCAD7EF2813064A077D
SHA-256 Fingerprint - E778F0F095FE843729CD1A0082179E5314A9C291442805E1FB1D8FB6B8886C3A
Trust Flag - Websites
Test URL - https://ss15-valid.managedpki.ne.jp

This CA operator has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1658793.

The next steps are as follows:

1. A representative of the CA operator must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Ben Wilson]

Attachment: SecureSign-Root-CA12-PEM.crt

Comment 2

[Ben Wilson]

Attachment: SecureSign-Root-CA14-PEM.crt

Comment 3

[Ben Wilson]

Attachment: SecureSign-Root-CA15-PEM.crt

Comment 4

[yoshikazu saito]

Cybertrust Japan confirms that all the data in this bug is correct, and that the correct certificates have been attached.

Comment 5

[John Schanck [:jschanck]]

Attachment: Bug 1908006 - Add Cybertrust Japan Roots to NSS. r=bwilson

Depends on D219925

Comment 6

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/fe68e1bc5d9416f4b493490c0d680bc0e195a461