TrustCor root inclusion request for three root certificates

TrustCor Systems opened this bug to request Mozilla inclusion of three root certificates: TrustCor RootCert CA-1, TrustCor RootCert CA-2, and TrustCor ECA-1. The initial submission included CA details, audit information, and the root certificates themselves, and Mozilla staff began information verification and public discussion. During review, a policy OID typo was identified in TrustCor’s subordinate certificates, and TrustCor said it would adjust its issuance profiles and reissue certificates to correct the issue. TrustCor also replaced the root certificates to remove a crlDistributionPoint extension and uploaded updated CP/CPS and audit materials. After public discussion and verification of the test websites, Mozilla approved the request and filed a follow-up NSS bug for the actual changes.

1. 2015-12-11 TrustCor submitted three root certificates for Mozilla inclusion.
2. 2016-01-25 TrustCor replaced the root certificates and said it had removed a crlDistributionPoint extension and corrected the policyID OID issue.
3. 2017-08-31 Mozilla approved inclusion of TrustCor RootCert CA-1, TrustCor RootCert CA-2, and TrustCor ECA-1.

1. 2015-12-11 Trustcorsystems representative — TrustCor submitted CA details, audit information, and three root certificate attachments.
2. 2016-01-06 Mozilla representative — Mozilla began information verification for the request.
3. 2016-01-21 Docusign representative — A reviewer noted a wrong policyId OID and suggested recertifying intermediate and subscriber certificates.
4. 2016-01-25 Trustcorsystems representative — TrustCor said it would modify its root certificates, remove the crlDistributionPoint extension, and publish updated CP/CPS documents.
5. 2016-02-13 Mozilla representative — Mozilla said the request had been added to the queue for public discussion.
6. 2017-04-20 Trustcorsystems representative — TrustCor attached its BR Self Assessment.
7. 2017-05-18 Mozilla representative — Mozilla opened the public discussion period for TrustCor's root inclusion request.
8. 2017-08-31 Mozilla representative — Mozilla approved inclusion of the three TrustCor roots and said it would file the NSS bug for the approved changes.