← China Financial Certification Authority (CFCA) cases
Bugzilla #1229288
Ev Enablement
New EV Policy OID for CFCA EV root
RESOLVED
WONTFIX
China Financial Certification Authority (CFCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The China Financial Certification Authority (CFCA) submitted a request to add a new EV Policy OID (2.23.140.1.1) for its EV SSL certificates. The request was prompted by the need to align with the CA/Browser Forum's recommended standards. However, Mozilla indicated that it would not accept requests to enable the Code Signing trust bit for roots, as this feature is being removed from the Mozilla CA Certificate Policy. The bug was ultimately resolved with a WONTFIX status, as there were no further actions required from Mozilla regarding the new OID.
Chronology
- CFCA requested to add a new EV Policy OID for its EV SSL certificates.
- Mozilla confirmed it would not enable the Code Signing trust bit for roots.
- The bug was closed with a WONTFIX status.
Thread Activity
- China Financial Certification Authority (CFCA) — CFCA submitted a request to add a new EV Policy OID for its EV SSL certificates.
- Mozilla representative — Mozilla will not accept requests to enable the Code Signing trust bit for roots.
- Mozilla representative — Closing this bug, as there is nothing for Mozilla to do here.
Participants
China Financial Certification Authority (CFCA)
Mozilla representative
External References
Similar Local Cases
CFCA: Wrong SerialNumber encoding
Add WoSign two new root certificates and EV enable
Enable Entrust roots for EV
Add SSL.com root certificate(s)
Add Network Solutions EV root cert
EV-Enable HARICA 2015 Root CAs
Add GlobalSign's SHA256 Root CA to Mozilla's trusted root list
ADD DigiNotar EV Root CA certificates