1920641 - Remove Security Communication RootCA3 root cert

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Comment 1

[SECOM Trust Systems - ONO Fumiaki]

1. Subject/Issuer field values in the root certificate to be changed
   Issuer: C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3
   Subject: C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3
2. SHA256 Fingerprint of the certificate to be changed
   24A55C2AB051442D0617766541239A4AD032D7C55175AA34FFDE2FBC4F5C5294
   https://crt.sh/?q=24A55C2AB051442D0617766541239A4AD032D7C55175AA34FFDE2FBC4F5C5294
3. Specify the change to be made
   Remove the Security Communication RootCA3 from the file certdata.txt.
4. Reason for requesting this change
   We mainly issue document signing and code signing certificates from Security Communication RootCA3.
   There are subordinate CA certificates for TLS server use with Name Constraints extension under Security Communication RootCA3, but we have no plans to build TLS server CA or S/MIME CA that require WebTrust audit in the future.
   Therefore, we would like to remove the Security Communication RootCA3 from the file certdata.txt.
5. Impact that the change may have on Mozilla users
   There is no impact to Mozilla users.

Comment 2

[John Schanck [:jschanck]]

Attachment: Bug 1920641 - remove Security Communication RootCA3 root cert. r=bwilson

Depends on D229176

Comment 3

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/30e2fd2f7da97479c409e3384cc663b15a957714