Closed Bug 1957685 Opened 1 year ago Closed 1 year ago

Turn off Websites Trust Bit from CAs

Categories

(NSS :: CA Certificates Code, task)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: bwilson, Assigned: beurdouche)

References

Details

Attachments

(1 external file)

Per Bug #1937338 and https://wiki.mozilla.org/CA/Root_CA_Lifecycles, please remove the websites trust bit from the following root CAs:

CA Name SHA 256 Hash EV?
Baltimore CyberTrust Root (expires 5/12/2025) 16AF57A9F676B0AB126095AA5EBADEF22AB31119D644AC95CD4B93DBF3F26AEB No
Entrust.net Certification Authority (2048) 6DC47172E01CBCB0BF62580D895FE2B8AC9AD4F873801E0C10B9C837D21EB177 Yes
AAA Certificate Services D7A7A0FB5D7E2731D771E9484EBCDEF71D5F0C3E0A2948782BC83EE0EA699EF4 No
Go Daddy Class 2 CA C3846BF24B9E93CA64274C0EC67C1ECC5E024FFCACD2D74019350E81FE546AE4 Yes
Starfield Class 2 CA 1465FA205397B876FAA6F0A9958E5590E40FCC7FAA4FB7C2C8677521FB5FB658 Yes
XRamp Global Certification Authority CECDDC905099D8DADFC5B1D209B737CBE2C18CFB2C10C0FF0BCF0D3286FC1AA2 Yes
GlobalSign Root CA EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99 Yes
Blocks: 1957701
Assignee: nobody → bbeurdouche
Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED

Confirming here that these changes have been distributed in Nightly 139.0a1 (2025-04-28).

Regressions: 1966632
No longer depends on: 1957679
See Also: → 1957679
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: