Firmaprofesional voluntary removal request for root certificates

Firmaprofesional opened this bug to request voluntary phase-out and removal of trust for two root CA certificates with the same subject and RSA key but different fingerprints and validity periods. The request says the case is not about key compromise or misissuance; instead, it asks Mozilla and other root programs to remove or phase out trust for the affected roots after the permitted transition population expires. Mozilla’s root entry for the 2014 certificate is described as already removed in NSS 3.94 / Firefox 121, while the 2009 certificate remains included and is the subject of the requested phase-out. The thread then tracks coordination with Chrome, Apple, and Microsoft on transition boundaries, SCT constraints, and physical removal timing. Firmaprofesional later reported that Chrome confirmed the corrected SCT constraint and that the 2014 root is expected to remain included during the transition, with physical removal targeted for a later Chrome Root Store update. The bug remains open with an outstanding action item to document each root program’s confirmed transition mechanism and final physical-removal date.

1. 2026-09-09 Firmaprofesional requested voluntary phase-out and removal of trust for two root CA certificates.
2. 2026-09-09 Chrome acknowledged the request and said a future Chrome Root Store update would change the sctNotAfter constraint.
3. 2026-09-18 Firmaprofesional reported completion of direct-submission outreach to the applicable browser root programs.
4. 2026-10-19 Firmaprofesional reported Chrome’s corrected SCT constraint and said the action item for final transition-mechanism and removal-date documentation was delayed.

1. 2026-09-09 Autoridad de Certificacion Firmaprofesional — Firmaprofesional opened the bug and requested voluntary removal or phase-out of trust for the affected root certificates.
2. 2026-09-09 Google representative — Chrome acknowledged the request and clarified that the phase-out is tied to Chrome Root Program Policy deadlines and the earlier inclusion process.
3. 2026-09-18 Autoridad de Certificacion Firmaprofesional — Firmaprofesional said it had completed the direct-submission component of the action item and sent program-specific outreach to Apple, Mozilla, Chrome, and Microsoft.
4. 2026-10-19 Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported Chrome’s corrected SCT constraint, noted that final physical-removal planning is still outstanding, and marked the action item delayed.