2020150 - Telia: Transition Plan for Existing Dual-Purpose Roots

Status: ASSIGNED

(CA Program :: CA Certificate Root Program, task)

Description

[Ben Wilson]

Attachment: 20260226-TeliaCA-Mozilla-Transition-Plan.pdf

Telia (CCADB CA Owner ID: A000055) has submitted a Transition Plan (attached) in accordance with section 7.5.3 of Mozilla Root Store Policy as well as Section 7.4 (Root CA Lifecycles).

This bug is filed to document the proposed timeline for trust bit modifications and lifecycle actions affecting:

• Telia Root CA v2 (CCADB Record: A007329) - https://crt.sh/?q=242B69742FCB1E5B2ABF98898B94572187544E5B4D9911786573621F6A74B82C
• TeliaSonera Root CA v1 (CCADB Record: A000212) - https://crt.sh/?q=DD6936FE21F8F077C123A1A521C12224F72255B73E03A7260693E8A24B0FA389

Both roots currently have both trust bits (websites and email) enabled.

Key elements of Telia’s plan include:

• Inclusion request for single-purpose roots (CCADB Case 00002426; Bug #1968852).
• Removal of the Email trust bit from Telia Root CA v2 effective January 1, 2029.
• Retention of the TLS trust bit for Telia Root CA v2 in accordance with MRSP §7.4.
• Removal of both TLS and Email trust bits from TeliaSonera Root CA v1 effective April 15, 2026 (per MRSP §7.4 lifecycle schedule).

An NSS bug will be filed to implement removal of TeliaSonera Root CA v1 from NSS effective April 15, 2026, since both trust bits will be removed.