← certSIGN cases
Bugzilla #1905072
Technical Compliance
Turn off Secure Email Trust Bit for certSIGN ROOT CA G2 cert
RESOLVED
INVALID
certSIGN
AI Summary
certSIGN requested the removal of the Secure Email Trust Bit for their ROOT CA G2 certificate due to a lack of S/MIME BR audit. The ROOT CA was created in 2017 and certSIGN has decided to limit its issuance to TLS certificates only. They are in the process of phasing out older issuing CAs. The request was made to ensure compliance and has no expected impact on Mozilla users. The case was resolved as the ROOT CA G2 does not currently have the email trust bit enabled.
Chronology
- certSIGN submitted a request to remove the Secure Email Trust Bit.
- Case closed as the email trust bit was not enabled.
Participants
Gabriel PETCU
Ben Wilson
External References
Similar Local Cases
Turn off Secure Email Trust Bit for certSIGN ROOT CA cert
Request to disable SMIME "trust bit" for GoDaddy CAs
Entrust: CRLs and OCSP responses not issued as specified in the CPS
DigiCert: SCEE / Justica: Non-BR-Compliant Certificate Issuance
Firmaprofesional: 2023 - Ensure Timestamp service Logs Integrity
Firmaprofesional: 2022 - Title field
Let's Encrypt: Failure to audit log subscriber certificate OCSP updates
Telekom Security: Finding in 2020 ETSI-Audit regarding weekly review of changes to configurations