← Krajowa Izba Rozliczeniowa S.A. (KIR) cases
Bugzilla #2030950
Root Update Request
KIR SA: Transition Plan for Existing Dual-Purpose Roots
ASSIGNED
Krajowa Izba Rozliczeniowa S.A. (KIR)
AI Summary
Krajowa Izba Rozliczeniowa S.A. (KIR) is transitioning from a dual-purpose root CA, SZAFIR ROOT CA2, to dedicated single-purpose roots for TLS and S/MIME certificates. The new roots, SZAFIR ROOT CA3 TLS and SZAFIR ROOT CA5 SMIME, are set to be included in root programs by Q2 2026, following WebTrust audits. The migration is planned for Q1 2027, with a complete operational transition expected within 90 days of inclusion. The existing dual-purpose root will cease issuing certificates by the end of Q2/Q3 2027, with trust bits removed by December 31, 2028.
Chronology
- Transition plan submitted in accordance with Mozilla Root Store Policy.
- WebTrust audits for new roots commenced.
- Expected completion of WebTrust audits.
- Planned issuance of TLS and S/MIME certificates exclusively under new roots.
- Request for distrust of SZAFIR ROOT CA2 for S/MIME to be submitted.
Participants
Patryk Czychewicz
Ben Wilson
External References
Similar Local Cases
Certigna: Transition Plan for Existing Dual-Purpose Root
OISTE: Transition Plan for Existing Dual-Purpose Root
HARICA: Transition Plan for Existing Dual-Purpose Roots
Telekom Security: Transition Plan for Existing Dual-Purpose Roots
GlobalSign: Transition Plan for Existing Dual-Purpose Roots
Identrust: Transition Plan for Existing Dual-Purpose Roots
Sectigo: Transition Plan for Existing Dual-Purpose Roots
SSL.com: Transition Plan for Existing Dual Purpose Roots