1918559 - Remove SecureSign RootCA11 root cert

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Maiko ISHIBASHI]

Steps to reproduce:

1. Certificate Issuer Organization: Japan Certification Services, Inc.

2. Owner: Cybertrust Japan

3. SHA256 Fingerprint of the certificate to be removed:
   BF0FEEFB9E3A581AD5F9E9DB7589985743D261085C4D314F6F5D7259AA421612

4. Reason for removal request
   SecureSign RootCA11 is a legacy root. It is SHA-1 root and was created before 2010. Now that the successors (SecureSign Root CA12, SecureSign Root CA14, and SecureSign Root CA15) were approved by Mozilla for inclusion and are going to be included (https://bugzilla.mozilla.org/show_bug.cgi?id=1658793), we would like to retire CA11.

5. Impact that the change may have on Mozilla users
   There is no impact on Mozilla users. The only valid certificate is the one for the test website.

Comment 1

[Ben Wilson]

Are you prepared for Mozilla to remove this root certificate in this month of October 2024?

Comment 2

[Maiko ISHIBASHI]

Thank you for contacting us. Yes, we are ready.

Comment 3

[John Schanck [:jschanck]]

Attachment: Bug 1918559 - remove SecureSign RootCA11 root cert. r=bwilson

Depends on D229175

Comment 4

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/14b6e08653137ba9f786e500db058e42db8bd7e3