ACIN / Global Trusted Sign root inclusion request and documentation review
This case was opened by Global Trusted Sign (ACIN iCloud Solutions, Lda) to request Mozilla inclusion of the "Global Trusted Sign Root Certification Authority 01" root certificate. Mozilla asked for the CA’s BR self-assessment, CCADB access, a CCADB root inclusion case, audit history, policy documents, and test website information before proceeding. Over time, the thread focused on review of the CA’s CP/CPS, audit statements, and test websites, with Mozilla repeatedly identifying missing or nonconforming items and the CA submitting updated documents. Mozilla later noted that the applicant should open an "Add/Update Root Request" case in CCADB and complete the required tabs. In July 2023, the CA asked whether it could close this root request and create a new one, and Mozilla replied that this would be fine and that the case would be closed the next day.
- Global Trusted Sign requested Mozilla inclusion of its root certificate.
- Mozilla directed the CA to create a Root Inclusion Case in CCADB.
- Mozilla reported that the revoked and expired test websites passed, but the valid website still had revocation-check issues.
- Mozilla said the applicant needed to open an Add/Update Root Request case in CCADB.
- Mozilla agreed to close this root request and said a new Bugzilla and CCADB case could be opened later.
- Globaltrustedsign representative — The CA said it had implemented a new PKI with its own root and sub-CA and asked for browser inclusion.
- Mozilla representative — Mozilla acknowledged the request and asked for the BR self-assessment and information checklist items.
- Mozilla representative — Mozilla said it could not find the CA in CCADB and asked it to apply for CCADB access.
- Mozilla representative — Mozilla clarified that the request was for the root certificate and said the subordinate CA information would be moved to an intermediate certificate record.
- Mozilla representative — Mozilla summarized remaining issues with expired test certificates, RFC 3647 formatting, and audit-letter problems.
- Mozilla representative — Mozilla reviewed updated CP/CPS documents and listed remaining fixes, including clearer non-delegation and reporting instructions.
- Mozilla representative — Mozilla instructed the applicant to open an Add/Update Root Request case in CCADB and complete the required tabs.
- Globaltrustedsign representative — The CA asked to close this root request and start a new one with cleaner information.
- Mozilla representative — Mozilla said that would be fine and that it would close the case the next day.