1990213 - Add certSIGN Root CA G4 root certificate

Status: ASSIGNED

(CA Program :: CA Certificate Root Program, task, P2)

Description

[Gabriel PETCU]

Steps to reproduce:

certSIGN ROOT CA G4 was created to build a PKI system dedicated for TLS certificates, that will replace the existing 'All purpose' certSIGN G2 PKI system.
Mozilla Root Inclusion Case Information:
https://ccadb.my.salesforce-sites.com/mozilla/PrintViewForCase?CaseNumber=00002680

Actual results:

The existing 'All purpose' certSIGN ROOT CA G2 PKI system will be removed from the Mozilla Trusted List in April 2026 due to the age of the key material.
certSIGN created a PKI System dedicated for the issuance and management of TLS certificates.

Expected results:

When the new root will be accepted and included in all the main Browsers all the TLS certificates issuance and management will be migrated to the new dedicated TLS system.

Comment 1

[Gabriel PETCU]

Key generation Ceremony report: https://bugzilla.mozilla.org/attachment.cgi?id=9512552
certSIGN ROOTCA G4 - CCADB Self Assessment Framework vSep2025: https://bugzilla.mozilla.org/attachment.cgi?id=9512543

Comment 2

[Gabriel PETCU]

certSIGN ROOT CA G4 - Certification Practice Statement:
https://www.certsign.ro/wp-content/uploads/2025/08/certSIGN-ROOT-CA-G4-Certification-Practice-Statement-v1.1.md

Comment 3

[Gabriel PETCU]

We received the audit report for the certSIGN ROOT CA G4 and we added it into the corresponding CCADB fields.