873118 - Enable email trust bits for "DST Root X3" and "DST ACES X6"

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Renne Rodriguez]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:20.0) Gecko/20100101 Firefox/20.0 (Beta/Release)
Build ID: 20130409194949

Steps to reproduce:

This is a request to turn on the email bit for the IdenTrust roots named "DST Root CA X3" and "DST ACES CA X6".  IdenTrust issues email certificate off these roots in the Mozilla root store. Email verification is done as stated the CPS and we believe it conforms to the Mozilla Certificate Policy requirements.  

The CPS links are below:

For "DST Root CA X3".  The most current CPS addresses the email verification practice in Section 3.2.5. CPS link is: https://secure.identrust.com/certificates/policy/ts/identrust_trustid_cps_v2.1_20121218.pdf 


For "DST ACES CA X6".  An addendum to the CPS Section 3.1.9.7 addresses the email validation practice. The link to the addendum is:  https://secure.identrust.com/certificates/policy/aces/identrust-aces-cps-addendum-ssl-v20120630.pdf

The link to IdenTrust audit covering both programs is:
https://cert.webtrust.org/ViewSeal?id=1360

The original inclusion bug number is the same for both roots:
https://bugzilla.mozilla.org/show_bug.cgi?id=394733

Comment 1

[Kathleen Wilson]

I am accepting this bug, and will work on it as soon as possible, but I have a large backlog.
https://wiki.mozilla.org/CA:Schedule#Requests_in_the_Information_Gathering_and_Verification_Phase

I will update this bug when I begin the Information Verification phase.
https://wiki.mozilla.org/CA:How_to_apply#Information_Verification

In the meantime, please provide the information listed here:
https://wiki.mozilla.org/CA:Information_checklist

Comment 2

[Kathleen Wilson]

Attachment: Initial CA Information Document

The attached document summarizes the information that has been verified.

The items highlighted in yellow indicate where further information or
clarification is needed. Please review the full document for accuracy and
completeness.

Comment 3

[Kathleen Wilson]

IdenTrust has decided not to move forward with enabling the email trust bit for this root. Instead, a new root renewal request has been created (bug #1037590).