1988913 - Add OISTE Root CA Certificates to NSS

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

This bug requests inclusion in the NSS root store of the following root certificates owned by OISTE:

Root Certificate 1 of 4
Friendly Name: OISTE Client Root ECC G1
Cert Location: http://public.wisekey.com/crt/ocreccg1.cer
SHA-1 Fingerprint: C02B13F91D7756ED6C9283F186DF2AD51E6EF2BC
SHA-256 Fingerprint: D9A32485A8CCA85539CEF12FFFFF711378A17851D73DA2732AB4302D763BD62B
Trust Flag: Email

Root Certificate 2 of 4
Friendly Name: OISTE Client Root RSA G1
Cert Location: http://public.wisekey.com/crt/ocrrsag1.cer
SHA-1 Fingerprint: BDA81320E0BF97EDA28E9E185FF2D5FEE52B13D5
SHA-256 Fingerprint: D02A0F994A868C66395F2E7A880DF509BD0C29C96DE16015A0FD501EDA4F96A9
Trust Flag: Email

Root Certificate 3 of 4
Friendly Name: OISTE Server Root ECC G1
Cert Location: http://public.wisekey.com/crt/osreccg1.cer
SHA-1 Fingerprint: 3BF68B09AE2A927BBAE38D3F1195D9E6440C45E2
SHA-256 Fingerprint: EEC997C0C30F216F7E3B8B307D2BAE42412D753FC8219DAFD1520B2572850F49
Trust Flag: Websites
Test URL: https://eccg1validssl.hightrusted.com/

Root Certificate 4 of 4
Friendly Name: OISTE Server Root RSA G1
Cert Location: http://public.wisekey.com/crt/osrrsag1.cer
SHA-1 Fingerprint: F700342594886831E434873F70FE86B3869FF06E
SHA-256 Fingerprint: 9AE36232A5189FFDDB353DFD26520C015395D22777DAC59DB57B98C089A651E6
Trust Flag: Websites
Test URL: https://rsag1validssl.hightrusted.com/

OISTE's inclusion application has been assessed in accordance with the Mozilla project guidelines, and the certificates approved for inclusion in bug #1936279.

The next steps are as follows:

1. A representative of the CA must confirm that all the data in this bug is correct, and that the correct certificates have been attached.
2. A Mozilla representative creates a patch with the new certificates.
3. The Mozilla representative requests that another Mozilla representative review the patch.
4. The Mozilla representative adds (commits) the patch to NSS, then closes this bug as RESOLVED FIXED.
5. At some time after that, various Mozilla products will move to using a version of NSS which contains the certificate. This process is mostly under the control of the release drivers for those products.

Comment 1

[Ben Wilson]

Pedro,
Please see Step #1 above.
Thanks,
Ben

Comment 2

[Ben Wilson]

Attachment: ocreccg1.cer

Comment 3

[Ben Wilson]

Attachment: ocrrsag1.cer

Comment 4

[Ben Wilson]

Attachment: osreccg1.cer

Comment 5

[Ben Wilson]

Attachment: osrrsag1.cer

Comment 6

[Pedro Fuentes]

Hello Ben,
this seems all OK to me.
Thanks!
Pedro

Comment 7

[Dennis Jackson]

Attachment: Bug 1988913 - Add OISTE roots. r=#nss-reviewers

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/projects/nss/rev/0f59abe809d6
Add OISTE roots. r=nss-reviewers,nkulatova

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/projects/nss/rev/3a2d6a6f7443
Add OISTE roots. r=nss-reviewers,nkulatova