1908009 - Remove Email Trust bit from certSIGN ROOT CA

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

As detailed in Bug #1905070 and in Bug #1905072, remove the email trust bit from the following certSIGN CAs:

certSIGN ROOT CA
Subject - OU=certSIGN ROOT CA; O=certSIGN; C=RO
Issuer - OU=certSIGN ROOT CA; O=certSIGN; C=RO
Valid From (GMT) - 7/4/2006
Valid To (GMT) - 7/4/2031
Certificate Serial Number - 200605167002
SHA-1 Fingerprint - FAB7EE36972662FB2DB02AF6BF03FDE87C4B2F9B
SHA-256 Fingerprint - EAA962C4FA4A6BAFEBE415196D351CCD888D4F53F3FA8AE6D7C466A94E6042BB

certSIGN ROOT CA G2
Subject - OU=certSIGN ROOT CA G2; O=CERTSIGN SA; C=RO
Issuer - OU=certSIGN ROOT CA G2; O=CERTSIGN SA; C=RO
Valid From (GMT) - 2/6/2017
Valid To (GMT) - 2/6/2042
Certificate Serial Number - 110034B64EC6362D36
SHA-1 Fingerprint - 26F993B4ED3D2827B0B94BA7E9151DA38D92E532
SHA-256 Fingerprint - 657CFE2FA73FAA38462571F332A2363A46FCE7020951710702CDFBB6EEDA3305

Comment 1

[Ben Wilson]

Gabriel,
Please reconfirm the accuracy of this request.
Thanks,
Ben

Comment 2

[Gabriel PETCU]

I reconfirm the accuracy of the request

Comment 3

[John Schanck [:jschanck]]

Attachment: Bug 1908009 - Remove Email Trust bit from certSIGN ROOT CA. r=bwilson

Depends on D219926

Comment 4

[Ben Wilson]

I will close Bug #1905072 as Invalid because the certSIGN ROOT CA G2 only has the websites bit enabled. We'll proceed with removing the email trust bit in the certSIGN ROOT CA.

Comment 5

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/7a5274dda6bfdb1dca1f08de82c7946ad46cdd46