304736 - Request to add Digicert Sdn. Bhd. CA certificates

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Frank Hecker]

I received a request from Digicert Sdn. Bdh., a CA in Malaysia, to add various
root and intermediate CA certificates. (Note that Digicert Sdn. Bdh. is not to
be confused with DigiCert, Inc., a US-based CA. As fas as I know the two
companies are completely independent, and the similarity in their names is
simply an unfortunate coincidence.)

The request was for three root CA certificates (Digicert Class 1 Root CA,
Digicert Class 2 Root CA, and PREMIERCA Root CA) as well as for serveral
intermediate CA certificates. In general we do *not* include intermediate CA
certificates in the Mozilla default CA certificate list, so I will be
considering only the request to include the root CA certificates.

I'll add more information to this bug shortly; right now I just wanted to get a
bug number assigned so I can include it in my CA certificate page.

Comment 1

[Gervase Markham [:gerv]]

According to http://hecker.org/mozilla/ca-certificate-list , the audit status of this CA is unknown, so we need to get back in touch.

Frank: do you have an email address for your contact at Digicert Sdn. Bdh.?

Gerv

Comment 2

[Frank Hecker]

Mohd Hanafiah bin Muhamad <[e-mail]>

Comment 3

[Gervase Markham [:gerv]]

I have sent the following message to [e-mail]:

Dear Sir,

A year and a half ago, you requested inclusion of the root certificate of your Certificate Authority in Mozilla products.
https://bugzilla.mozilla.org/show_bug.cgi?id=304736

Since that time, we have formalised a CA Certificate policy, detailing how we process such requests:
http://www.mozilla.org/projects/security/pki/nss/ca-certificates/policy.html
We hope that this will bring clarity to the process.

Due to the age of the request, the above mentioned bug report has been closed. If inclusion of your certificate(s) is still desired, please could you file a new bug report as specified in section 14 of the policy, including all the information requested by that clause.

Many thanks,

Gerv