797952 - Remove EV Treatment for WellsSecure Public Root Certificate Authority

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Kathleen Wilson]

Wells Fargo has requested to remove EV treatment from the "WellsSecure Public Root Certificate Authority" root certificate. EV treatment for this root certificate was requested and approved in bug #428390, and implemented in bug #449394. However, Wells Fargo has since determined that they are not going to issue EV certificates within this hierarchy.

The relevant information is as follows:

CN = WellsSecure Public Root Certificate Authority
O = Wells Fargo WellsSecure
SHA-1: E7 B4 F6 9D 61 EC 90 69 DB 7E 90 A7 40 1A 3C F4 7D 4F E8 EE
EV policy OID: 2.16.840.1.114171.500.9

Please remove the entry for this EV treatment from PSM.

Comment 1

[Kathleen Wilson]

Jason, Please confirm that the above information is correct.

Comment 2

[Jason Kubicki]

This request is accurate and appropriate. Please discontinue the EV Treatment for this hierarchy. Wells Fargo will not be pursuing a SHA-1 EV SSL offering.

Comment 3

[Dana Keeler (she/her) [:keeler]]

Attachment: patch

bsmith gave this r+ in bug 760313 comment 9.

Comment 4

[Dana Keeler (she/her) [:keeler]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/2d96a6ec94d8

Comment 5

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

https://hg.mozilla.org/mozilla-central/rev/2d96a6ec94d8