certSIGN Root CA G2 websites trust-bit inclusion request

certSIGN opened this case to request Mozilla inclusion for the certSIGN Root CA G2, specifically for Websites and EV. Mozilla asked certSIGN to provide the required root inclusion information and a BR self-assessment, and certSIGN later submitted the CCADB case and updated CPS/PDS materials. Mozilla reviewers then raised several issues in the CP/CPS review, including the trust model for the Web CA, CPS nesting, annual review publication, and other policy details. certSIGN responded to the review comments, said it would review and update its CPSs, and later provided audit-related documents and an attestation letter. Mozilla announced an intention to approve the request, then approved inclusion of the certSIGN ROOT CA G2 for Websites with EV enabled, and filed follow-up NSS and PSM bugs for the implementation changes.

1. 2017-09-27 certSIGN requested Mozilla inclusion for certSIGN Root CA G2.
2. 2019-03-21 certSIGN submitted the CCADB root inclusion case and a BR self-assessment.
3. 2020-06-11 Mozilla approved inclusion of certSIGN ROOT CA G2 for Websites with EV enabled.

1. 2017-09-27 certSIGN — Opened the bug for adding the certSIGN Root CA G2 certificate.
2. 2017-09-27 Mozilla representative — Asked certSIGN to provide the Mozilla information checklist items and attach its BR self-assessment.
3. 2019-03-21 Community commenter — Posted the CCADB case link and attached the BR self-assessment.
4. 2019-03-28 Mozilla representative — Said the request was still waiting for the required information to be entered in CCADB.
5. 2019-04-01 Mozilla representative — Said the request was ready for detailed CP/CPS review and assigned it onward.
6. 2019-12-04 Community commenter — Provided preliminary review feedback and questioned whether Mozilla should trust the Web CA rather than the root.
7. 2019-12-20 Community commenter — Responded to the review comments and said certSIGN would review the findings.
8. 2020-04-03 Community commenter — Reviewed updated documents and noted which issues were fixed or still open.
9. 2020-05-02 Community commenter — Reported that the audit had been performed and linked the draft attestation letter.
10. 2020-06-02 Mozilla representative — Announced an intention to approve the inclusion request.
11. 2020-06-11 Mozilla representative — Approved inclusion of certSIGN ROOT CA G2 for Websites with EV enabled and said NSS and PSM bugs would be filed.