1953105 - Remove "Hellenic Academic and Research Institutions RootCA 2015" and "Hellenic Academic and Research Institutions ECC RootCA 2015" root certificates from NSS

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Dimitris Zacharopoulos]

Steps to reproduce:

Turn off Trust Bit(s) for the following root certs:

• Hellenic Academic and Research Institutions RootCA 2015
• Hellenic Academic and Research Institutions ECC RootCA 2015

Actual results:

• Subject/Issuer: C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015

• SHA256 Fingerprint: A0:40:92:9A:02:CE:53:B4:AC:F4:F2:FF:C6:98:1C:E4:49:6F:75:5E:6D:45:FE:0B:2A:69:2B:CD:52:52:3F:36

• Specify the change: Turn-off Websites and email trust bits

• Reason for requesting this change: Subscribers have migrated to other HARICA dedicated TLS and S/MIME hierarchies.

• Impact that the change may have on Mozilla users: None expected

• Subject/Issuer: C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015

• SHA256 Fingerprint: 44:B5:45:AA:8A:25:E6:5A:73:CA:15:DC:27:FC:36:D2:4C:1C:B9:95:3A:06:65:39:B1:15:82:DC:48:7B:48:33

• Specify the change: Turn-off Websites and email trust bits

• Reason for requesting this change: Subscribers have migrated to other HARICA dedicated TLS and S/MIME hierarchies.

• Impact that the change may have on Mozilla users: None expected

Comment 1

[Ben Wilson]

Hi Dimitris,
Rather than remove the trust bits, we'd prefer to remove the CA certificates from our certdata.txt file.
Does that sound acceptable?
Thanks,
Ben

Comment 2

[Dimitris Zacharopoulos]

Yes, thank you.