← China Internet Network Information Center (CNNIC) cases
Bugzilla #1177209 Ca Certificate Compliance Incident

CNNIC Action Items

RESOLVED FIXED China Internet Network Information Center (CNNIC)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

This case involves the China Internet Network Information Center (CNNIC) addressing compliance issues related to its root certificates, which were partially disabled due to previous violations of Mozilla Policy. CNNIC is required to implement specific action items to ensure future compliance, including improvements to its CA processes and documentation. The CA has made progress on these items, including completing a WebTrust audit and upgrading its CA system. CNNIC plans to re-apply for full inclusion in the Mozilla Root Store after completing all necessary audits and improvements. The case is currently resolved, with further follow-up expected in a related bug.

Model: gpt-4o-mini Generated: 2026-06-13 14:01 UTC Revised: 2026-06-16 18:02 UTC Confidence: 0.85 21 comments
Chronology
  1. CNNIC root certificates are partially disabled; action items for compliance are outlined.
  2. CNNIC receives audit letter confirming remediation work.
  3. Bug is closed as resolved; further follow-up to occur in related bug.
Thread Activity
  1. Mozilla representative — CNNIC root certificates are in a partially disabled state; action items for compliance are outlined.
  2. Cnnic representative — CNNIC provides a status update on remediation work and audit progress.
  3. Cnnic representative — CNNIC receives the audit letter for remediation work.
  4. Mozilla representative — Closing this bug as resolved; all further follow-up should be in Bug #1312957.
Participants
Mozilla representative Cnnic representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
#1390997 RESOLVED Ca Certificate Compliance Incident Revocation Issue Opened 2017-08-16 · Closed 2023-02-22 · 78% similar
GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields
#1368171 RESOLVED Ca Certificate Compliance Incident Opened 2017-05-26 · Closed 2024-06-30 · 77% similar
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
#1391055 RESOLVED Ca Certificate Compliance Incident Opened 2017-08-16 · Closed 2023-02-22 · 76% similar
Microsec: Non-BR-Compliant Certificate Issuance
#1390991 RESOLVED Ca Certificate Compliance Incident Certificate Misissuance Opened 2017-08-16 · Closed 2023-02-22 · 75% similar
Disig: Non-BR-Compliant Certificate Issuance
#1398240 RESOLVED Ca Certificate Compliance Incident Opened 2017-09-08 · Closed 2023-02-22 · 75% similar
Firmaprofesional: Non-BR-Compliant OCSP Responders
#1717795 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Opened 2021-06-23 · Closed 2023-02-22 · 71% similar
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
#1391054 RESOLVED Ca Certificate Compliance Incident Certificate Misissuance Opened 2017-08-16 · Closed 2023-02-22 · 70% similar
Izenpe: Non-BR-Compliant Certificate Issuance
#1398259 RESOLVED Self Reported Incident Incident Closure Request Opened 2017-09-08 · Closed 2023-02-22 · 69% similar
SECOM: Non-BR-Compliant OCSP Responders

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action