Kamu SM request to include the TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 root certificate

This case is a Mozilla CA Program request from Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM), to include a new root certificate and enable the Websites trust bit. The CA provided its initial CA information, audit report, root certificate, and later supplied the Turkish and English CP/CPS URLs and updated audit materials. During review, Mozilla asked about the CP/CPS URLs and noted OCSP test issues; Kamu SM said it fixed the HTTP GET error and provided the Turkish CP/CPS link. Mozilla then opened public discussion, completed its assessment, and approved the request, with an NSS bug filed for the actual root-store change and constraints. The bug is resolved as FIXED.

1. 2016-04-07 Kamu SM submitted a new root certificate request for TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1.
2. 2016-05-16 Kamu SM reported that the HTTP GET OCSP error had been fixed.
3. 2017-02-02 Mozilla opened public discussion for the root inclusion request.
4. 2017-03-22 Mozilla approved inclusion of the root certificate with Websites trust bit.
5. 2017-03-22 Mozilla filed NSS bug 1349705 for the actual root-store change.

1. 2016-04-07 Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) — Kamu SM opened the bug to submit its new root certificate and attached the initial CA information, audit report, and root certificate.
2. 2016-04-21 Mozilla representative — Mozilla began information verification for the request.
3. 2016-04-28 Mozilla representative — Mozilla asked for the direct URLs to the CP and CPS in Turkish and English.
4. 2016-05-05 Community commenter — Kamu SM explained the OCSP GET and nextUpdate issues and asked whether responding to HTTP GET requests with RFC 2560 compliance was sufficient.
5. 2016-05-05 Mozilla representative — Mozilla said the nextUpdate value is optional under RFC 6960 but required under RFC 5019, and asked Kamu SM to update the bug when the other errors were resolved.
6. 2016-05-06 Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) — Kamu SM said it had responded to the March 2016 CA Communication.
7. 2016-05-11 Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) — Kamu SM provided the Turkish CP/CPS URL.
8. 2016-05-16 Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) — Kamu SM said it had fixed the HTTP GET error and tested it successfully.
9. 2016-05-24 Mozilla representative — Mozilla added the request to the queue for public discussion.
10. 2017-02-02 Mozilla representative — Mozilla opened the public discussion period for the request and linked the discussion thread.
11. 2017-03-17 Mozilla representative — Mozilla summarized its assessment and said it intended to approve the request.
12. 2017-03-22 Mozilla representative — Mozilla approved inclusion of the root certificate and said it would file the NSS bug for the change.