Microsec Ltd. root CA inclusion request for Microsec e-Szigno Root CA
This case was Microsec Ltd.’s request to add the Microsec e-Szigno Root CA certificate to Mozilla’s root store. The request was opened by Microsec in 2007 and included details about its CP/CPS documents, audit oversight by the Hungarian National Communications Authority (NHH), and the types of certificates issued under the root. Mozilla reviewers asked for additional documentation, including clearer public CPS language and verification of the audit statement. Microsec provided a commitment letter, updated its CPS to add the requested verification statements, and later supplied an English translation of the CPS. The remaining issue was confirmation of the audit report’s authenticity; Kathleen Wilson later stated that the audit had been confirmed, completing information gathering. Mozilla then approved the request for the Microsec e-Szigno Root CA with trust bits for email, SSL, and code signing, and the bug was later marked RESOLVED FIXED after the NSS implementation bug was filed and resolved.
- Microsec opened a request to include the Microsec e-Szigno Root CA in Mozilla’s root store.
- Microsec said it had updated its CPS to include the requested verification statements.
- The audit was confirmed, completing the information-gathering phase.
- Mozilla approved inclusion of the Microsec e-Szigno Root CA with email, SSL, and code-signing trust bits.
- Mozilla filed the NSS implementation bug needed for the actual changes.
- Berta representative — Microsec requested inclusion of its root certificate and described its CA services, policies, and audit oversight.
- Berta representative — Microsec said the audit document was now available from its website.
- Berta representative — Microsec confirmed domain, email, and code-signing verification practices and said it would update its CPS.
- Mozilla representative — Mozilla said it could proceed on the basis of an interim confirmation letter and asked Microsec to prepare one.
- Berta representative — Microsec attached a scanned copy of its commitment letter and said the original had been mailed.
- Mozilla representative — Mozilla said the audit document at the provided URL was a 404 and asked Microsec to get the auditor to host it.
- Berta representative — Microsec explained it could not control the auditor’s website and offered postal verification and direct contact details.
- Bolyard representative — Mozilla’s pending list showed the request status as information confirmed complete.
- Mozilla representative — Kathleen Wilson asked follow-up questions about SSL validation, audit verification, and problematic practices.
- Berta representative — Microsec answered the validation questions, provided example sites, and described its certificate practices.
- Mozilla representative — Mozilla said it did not remember verifying the NHH audit and suggested re-contacting NHH.
- Mozilla representative — Kathleen Wilson said the audit had been confirmed and assigned the request onward for public discussion.
- Hecker representative — Mozilla opened the first public discussion period for the request.
- Mozilla representative — Kathleen Wilson opened the second public discussion period.
- Mozilla representative — Kathleen Wilson summarized the assessment and recommended approval.
- Hecker representative — Mozilla approved the request for the Microsec e-Szigno Root CA with email, SSL, and code-signing trust bits.
- Mozilla representative — Kathleen Wilson filed bug 483852 against NSS for the implementation changes.