SSL.com root inclusion request for four roots and trust-bit changes

SSL.com opened this bug to request Mozilla inclusion of four root certificates: two non-EV roots and two EV roots. The initial request included enabling Email and Websites trust bits for the non-EV roots, Websites trust for the EV roots, and EV treatment for the EV roots. Mozilla asked SSL.com to provide information verification, a BR self-assessment, test websites, and audit materials, and SSL.com supplied the requested documents and links over time. Mozilla later opened public discussion for the request, then approved inclusion of the four roots and the requested trust-bit/EV changes. The bug was resolved as FIXED, and related implementation bugs were filed in NSS and PSM.

1. 2016-06-01 SSL.com requested Mozilla inclusion for four root certificates, including two non-EV roots and two EV roots.
2. 2017-05-15 SSL.com submitted its BR self-assessment materials.
3. 2017-08-08 Mozilla opened public discussion for inclusion of the four SSL.com roots and requested trust-bit changes.
4. 2017-10-23 Mozilla approved inclusion of the four roots and the requested trust-bit/EV changes.

1. 2016-06-01 SSL.com — SSL.com filed the request and provided details for the RSA, ECC, EV RSA, and EV ECC roots, including URLs, fingerprints, and intended trust uses.
2. 2016-06-02 Mozilla representative — Mozilla requested information verification.
3. 2016-09-19 Mozilla representative — Mozilla asked SSL.com to provide publicly disclosed subordinate CA certificate URLs for all root certificates.
4. 2017-04-17 Mozilla representative — Mozilla asked SSL.com to perform the BR Self Assessment and attach it to the bug.
5. 2017-05-15 SSL.com — SSL.com attached its BR self-assessment introduction and spreadsheet.
6. 2017-06-12 SSL.com — SSL.com provided test sites for the EV RSA R2 root and EV SSL intermediate CA RSA R2 certificates.
7. 2017-08-02 Mozilla representative — Mozilla said the audit reports had been verified and that public discussion would start soon.
8. 2017-08-08 Mozilla representative — Mozilla opened public discussion for inclusion of the four roots and the requested trust-bit changes.
9. 2017-10-16 Mozilla representative — Mozilla posted the public review summary and stated that the public comment period was over.
10. 2017-10-23 Mozilla representative — Mozilla approved the request and said NSS and PSM bugs would be filed for the actual changes.