← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1684158
Root Removal Request
PKIoverheid: Removal of websites trust bit for "Staat der Nederlanden Root CA – G3"
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
Logius has requested the removal of the websites trust bit for the "Staat der Nederlanden Root CA – G3" due to non-compliance with the Delegated OCSP Responder EKU requirements, which poses a vulnerability. Mozilla has agreed to disable this trust bit effective February 1, 2021. The email trust bit will remain enabled as per Logius's request. The case has been resolved with the necessary changes filed for implementation.
Chronology
- Initial request made by Logius to remove websites trust bit.
- Logius confirmed the decision to turn off the websites trust bit.
- Mozilla filed Bug #1687822 for code changes in NSS.
- Case marked as resolved.
Participants
David Weissenberg
Kathleen Wilson
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Removal request of StartCom 1024 bit CA root
Remove StartCom CA from Mozilla for violation of CA policy
Disable Izenpe.com root cert
Remove CA Disig Root R1
Remove AOL Time Warner root certs
please remove Wells Fargo from your listing of root CA's
PROCERT: Action Items
ANSSI: problematic certificates issued by AC Infrastructure