2017464 - Remove Websites Trust Bit from Root CN=Certigna

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task)

Description

[Ben Wilson]

Remove the websites trust bit from the following root CA:

Certificate "Certigna"
Issuer: CN=Certigna,O=Dhimyotis,C=FR
Serial Number:00:fe:dc:e3:01:0f:c9:48:ff
Subject: CN=Certigna,O=Dhimyotis,C=FR
Not Valid Before: Fri Jun 29 15:13:05 2007
Not Valid After : Tue Jun 29 15:13:05 2027
Fingerprint (SHA-256): E3:B6:A2:DB:2E:D7:CE:48:84:2F:7A:C5:32:41:C7:B7:1D:54:14:4B:FB:40:C1:1F:3F:1D:0B:42:F5:EE:A1:2D
Fingerprint (SHA1): B1:2E:13:63:45:86:A4:6F:1A:B2:60:68:37:58:2D:C4:AC:FD:94:97

Comment 1

[Ben Wilson]

Certigna has indicated that they have shifted to use the Certigna Root CA (https://crt.sh/?q=D48D3D23EEDB50A459E55197601C27774B9D7B18C94D5A059511A10250B93168) and that the removal of the websites trust bit from "CA=Certigna" should not have any effect on Mozilla users.

Comment 2

[Ben Wilson]

Current average daily validations (validations_on_day) for certificates under this Root CA is approximately: 79,169.

Comment 3

[Anna Weine]

Attachment: Bug 2017464 - Remove Websites Trust Bit from Root CN=Certigna

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/projects/nss/rev/bf61036d7f8e
Remove Websites Trust Bit from Root CN=Certigna r=bwilson