← HARICA cases
Bugzilla #2020140 Root Update Request

HARICA: Transition Plan for Existing Dual-Purpose Roots

ASSIGNED HARICA
AI Summary

This case tracks HARICA's preliminary transition plan for two 2015 Root CAs, which are currently dual-purpose. HARICA aims to comply with the Mozilla Root Store Policy by transitioning to a single trust bit by December 31, 2028. The proposed plan includes distrust dates for TLS and S/MIME, with complete root removal from NSS scheduled for April 15, 2030. Challenges include legacy compatibility issues and the impact of Chrome's planned clientAuth EKU removal.

Model: gpt-4o-mini Generated: 2026-06-13 21:16 UTC Confidence: 1.00
Chronology
  1. HARICA 2015 Root key generation.
  2. HARICA 2015 Roots added to NSS.
  3. Migration of most TLS and S/MIME issuance to dedicated 2021 hierarchies.
  4. Websites (TLS) distrust_after_date.
  5. S/MIME distrust_after_date.
  6. Removal of HARICA 2015 Roots from NSS.
Participants
Ben Wilson
External References
Similar Local Cases
#2032100 ASSIGNED Root Update Request Opened 2026-04-15 Still Open · 53% similar
SECOM: Transition Plan for Existing Dual-Purpose Roots
#2018158 ASSIGNED Root Update Request Opened 2026-02-20 Still Open · 52% similar
OISTE: Transition Plan for Existing Dual-Purpose Root
#2031303 ASSIGNED Root Update Request Opened 2026-04-13 Still Open · 52% similar
FNMT-RCM: Transition Plan for Existing Roots
#2018979 ASSIGNED Root Update Request Opened 2026-02-24 Still Open · 51% similar
eMudhra: Transition Plan for Existing Dual-Purpose Roots
#2030950 ASSIGNED Root Update Request Opened 2026-04-10 Still Open · 51% similar
KIR SA: Transition Plan for Existing Dual-Purpose Roots
#2020150 ASSIGNED Root Update Request Opened 2026-02-28 Still Open · 51% similar
Telia: Transition Plan for Existing Dual-Purpose Roots
#2031867 ASSIGNED Root Update Request Opened 2026-04-14 Still Open · 50% similar
Identrust: Transition Plan for Existing Dual-Purpose Roots
#2026208 ASSIGNED Root Update Request Opened 2026-03-25 Still Open · 50% similar
Telekom Security: Transition Plan for Existing Dual-Purpose Roots

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action