1957679 - Remove EV treatment from 7 Root CAs

Status: RESOLVED FIXED

(Core :: Security: PSM, task)

Description

[Ben Wilson]

Per Bug #1937338, EV enablement needs to be removed from the following seven (7) Root CAs:

Hellenic Academic and Research Institutions RootCA 2015
SHA256 Hash: A040929A02CE53B4ACF4F2FFC6981CE4496F755E6D45FE0B2A692BCD52523F36
Mozilla EV Policy OID: 2.23.140.1.1
ExtendedValidation.cpp OIDs: 2.23.140.1.1
Test Website: https://haricarootca2015-valid-ev.harica.gr

Hellenic Academic and Research Institutions ECC RootCA 2015
SHA256 Hash: 44B545AA8A25E65A73CA15DC27FC36D24C1CB9953A066539B11582DC487B4833
Mozilla EV Policy OID: 2.23.140.1.1
ExtendedValidation.cpp OIDs: 2.23.140.1.1
Test Website: https://haricaeccrootca2015-valid-ev.harica.gr

Entrust.net Certification Authority (2048)
SHA256 Hash: 6DC47172E01CBCB0BF62580D895FE2B8AC9AD4F873801E0C10B9C837D21EB177
Mozilla EV Policy OID: 2.16.840.1.114028.10.1.2
ExtendedValidation.cpp OIDs: 2.16.840.1.114028.10.1.2
Test Website: https://2048test.entrust.net

Go Daddy Class 2 CA
SHA256 Hash: C3846BF24B9E93CA64274C0EC67C1ECC5E024FFCACD2D74019350E81FE546AE4
Mozilla EV Policy OID: 2.16.840.1.114413.1.7.23.3
ExtendedValidation.cpp OIDs: 2.16.840.1.114413.1.7.23.3
Test Website: https://valid.gdi.catest.godaddy.com/

Starfield Class 2 CA
SHA256 Hash: 1465FA205397B876FAA6F0A9958E5590E40FCC7FAA4FB7C2C8677521FB5FB658
Mozilla EV Policy OID: 2.16.840.1.114414.1.7.23.3
ExtendedValidation.cpp OIDs: 2.16.840.1.114414.1.7.23.3
Test Website: https://valid.sfi.catest.starfieldtech.com/

XRamp Global Certification Authority
SHA256 Hash: CECDDC905099D8DADFC5B1D209B737CBE2C18CFB2C10C0FF0BCF0D3286FC1AA2
Mozilla EV Policy OID: 2.16.840.1.114404.1.1.2.4.1
ExtendedValidation.cpp OIDs: 2.16.840.1.114404.1.1.2.4.1
Test Website: https://xgcatest.vikingcloud.com

GlobalSign Root CA
SHA256 Hash: EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99
Mozilla EV Policy OID: 2.23.140.1.1
ExtendedValidation.cpp OIDs: 2.23.140.1.1
Test Website: https://valid.r1.roots.globalsign.com

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1957679 - remove EV treatment for 7 roots for April 2025 root changes r?nkulatova

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c411248b0e59
remove EV treatment for 7 roots for April 2025 root changes r=nkulatova

Comment 3

[Ben Wilson]

Reviewed Test Websites from Comment #0 in Nightly 139.0a1 (2025-04-08) and EV treatment has been removed.

Comment 4

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/c411248b0e59