ACCV: Transition Plan for Existing Root
This case is about ACCV’s plan to transition from the existing ACCVRAIZ1 root to new dedicated single-purpose TLS hierarchies. ACCV states that Mozilla Root Store Policy sections 7.5 and 7.4 require transitioning multipurpose roots to single-purpose hierarchies and address root CA lifecycle trust-bit removal. ACCV explains that, per Mozilla’s published Root CA Lifecycle transition schedule, websites trust bit removal for a root generated in 2011 (such as ACCVRAIZ1) is scheduled for April 15, 2028. To keep TLS certificates issued under ACCVRAIZ1 trusted during the migration, ACCV requests that the websites trust bit for the existing self-signed root CA be maintained until December 31, 2028. ACCV also describes the new dedicated TLS roots it submitted for inclusion under CCADB CASE ID: 00002687 (in revision process), including ACCV ROOT RSA TLS 2024 and ACCV ROOT ECC TLS 2024. The bug is currently in ASSIGNED status.
- ACCV submitted a transition plan to manage trust-bit removal for the existing ACCVRAIZ1 root while migrating to new dedicated TLS hierarchies.
- Mozilla updated the bug assignment after receiving the transition plan.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Submitted the ACCV transition plan requesting maintenance of the ACCVRAIZ1 websites trust bit until December 31, 2028 to support continued trust for TLS certificates during migration to new TLS hierarchies.