1938245 - Add D-Trust 2023 TLS Roots to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

This bug requests inclusion in the NSS root store of the following two (2) D-Trust root certificates:

Root Certificate 1 of 2
Friendly Name: D-TRUST BR Root CA 2 2023
Cert Location: https://www.d-trust.net/cgi-bin/D-TRUST_BR_Root_CA_2_2023.crt
SHA-1 Fingerprint: 2DB070EE7194AF696817DB79CE589FA06B96F787
SHA-256 Fingerprint: 0552E6F83FDF65E8FA9670E666DF28A4E21340B510CBE52566F97C4FB94B2BD1
Trust Flags: Websites
Test URL: https://certdemo-dv-valid-rsa.tls.d-trust.net/

Root Certificate 2 of 2
Friendly Name: D-TRUST EV Root CA 2 2023
Cert Location: https://www.d-trust.net/cgi-bin/D-TRUST_EV_Root_CA_2_2023.crt
SHA-1 Fingerprint: A55BD8476C8F19F74CF46D6BB6C2798222DF548B
SHA-256 Fingerprint: 8E8221B2E7D4007836A1672F0DCC299C33BC07D316F132FA1A206D587150F1CE
Trust Flags: Websites
Test URL: https://certdemo-ev-valid-rsa.tls.d-trust.net/

These CAs have been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1836258

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Ben Wilson]

Attachment: D-TRUST_BR_RootCA_2_2023_PEM.cer

Comment 2

[Ben Wilson]

Attachment: D-TRUST_EV_RootCA_2_2023_PEM.cer

Comment 3

[Ben Wilson]

Enrico or Leyla,
Please see step 1 above in Comment #0.
Thanks,
Ben

Comment 4

[Leyla Sahin]

I hereby confirm that all data in this bug is correct and that the correct certificates have been attached.
Thanks,
Leyla

Comment 5

[Dennis Jackson]

Attachment: Bug 1938245 - Add D-Trust 2023 TLS Roots to NSS r=#nss-reviewers

Comment 6

[Dennis Jackson]

https://hg.mozilla.org/projects/nss/rev/bbbf48a5a01aa42bc2fcfbfa94d0c32a5ff39827