IZENPE: Postpone removal of Izenpe Root CA TLS trust bit
Izenpe S.A. has requested a one-year extension for the removal of the trust bit for its Root CA TLS certificate, originally scheduled for April 15, 2026. The request is based on the need to complete the deployment of a new PKI infrastructure and to ensure a smooth transition for its subscribers. Mozilla has acknowledged the request but requires detailed information regarding the deployment timeline, audit activities, and subscriber transition plans before considering the extension. Izenpe has been providing monthly updates on their progress and has faced delays in their software compliance with ACME requirements. Mozilla has indicated that it will proceed with a distrustAfter date of April 15, 2026, aligned with Chrome's decision, and has advised Izenpe to ensure subscriber migration to avoid service disruptions.
- Scheduled distrust of Izenpe Root CA TLS certificate
- Izenpe S.A. — Izenpe requests a one-year extension for the removal of the trust bit for its Root CA TLS certificate.
- Mozilla representative — Mozilla requests additional detailed information to evaluate Izenpe's request.
- Izenpe S.A. — Izenpe provides a detailed deployment timeline and milestones.
- Google representative — Chrome announces a phased-out approach for the Izenpe root using the SCTNotAfter feature.
- Mozilla representative — Mozilla confirms the distrustAfter date of April 15, 2026, for Izenpe's root certificate.