← Netlock cases
Bugzilla #2033033
Root Update Request
Netlock: Transition Plan for Existing Dual-Purpose Root
ASSIGNED
Netlock
AI Summary
NetLock has submitted a transition plan for the NetLock Arany (Class Gold) Root CA, which is currently a dual-purpose root trusted for both TLS and S/MIME. The plan relies on the natural expiration of the root certificate on December 6, 2028, which is before the Mozilla Root Store Policy compliance deadline of December 31, 2028. NetLock has committed to not issuing new subordinate CA or end-entity certificates that would extend reliance on this root beyond its expiration. The situation has been characterized as a controlled legacy condition rather than an active security incident, with no immediate remediation required.
Chronology
- MRSP §7.5 becomes applicable
- Non-compliance identified
- Bug 2033033 opened and transition plan documented
- Full Incident Report submitted
- Root expiration (end of condition)
- MRSP §7.5 enforcement deadline
Participants
Ben Wilson
Roland Kaluha
External References
Similar Local Cases
SECOM: Transition Plan for Existing Dual-Purpose Roots
eMudhra: Transition Plan for Existing Dual-Purpose Roots
HARICA: Transition Plan for Existing Dual-Purpose Roots
Sectigo: Transition Plan for Existing Dual-Purpose Roots
DigiCert: Transition Plan for Existing Dual-Purpose Roots
SSL.com: Transition Plan for Existing Dual Purpose Roots
Asseco DS / Certum: Transition Plan for Existing Dual-Purpose Roots
Telekom Security: Transition Plan for Existing Dual-Purpose Roots