2032170 - SSL.com: Transition Plan for Existing Dual Purpose Roots

Status: ASSIGNED

(CA Program :: CA Certificate Root Program, task)

Description

[SSL.com]

SSL.com submits this transition plan pursuant to Mozilla Root Store Policy section 7.5.3 for the following dual-purpose roots currently included in Mozilla’s root store:

• SSL.com Root Certification Authority RSA

• SSL.com Root Certification Authority ECC

SSL.com’s transition strategy is to migrate all publicly trusted TLS issuance from these dual-purpose roots to SSL.com’s dedicated TLS hierarchies already included in Mozilla’s root store:

• SSL.com TLS RSA Root CA 2022

• SSL.com TLS ECC Root CA 2022

SSL.com will then request removal of the websites trust bit from the two legacy roots, with completion no later than December 31, 2028.

SSL.com has already established dedicated TLS successor roots and will use the period through 2028 to inventory, phase out, replace, or retire remaining TLS dependencies under the legacy roots, while maintaining continuity for email trust where applicable.

Note: For the dual-purpose roots attached to our newly acquired CA, VikingCloud, SSL.com submitted a request to remove all VikingCloud Root Certificates from its Root Store. This request is documented in Bug 2020019 - Remove Six (6) Viking Cloud Root CAs and Bug 2020144 - Remove Six Viking Cloud Root CAs from NSS.