Certigna root inclusion request for Mozilla NSS

Certigna (Dhimyotis) asked Mozilla to add its root certificate to the Mozilla root CA list. The request began with Certigna providing details for its root and subordinate CAs, audit information, and validation practices for SSL and email certificates. Mozilla then gathered additional information, including CP/CPS excerpts, audit confirmation from LSTI, and public discussion on the request. After the second public discussion, Mozilla approved the Certigna root for email and SSL trust bits, but postponed code-signing because it was unclear whether code-signing had been covered by the audit. The thread ends with the NSS implementation bug filed and the code-signing trust bit left for a separate future request.

1. 2007-08-22 Certigna requested inclusion of its root certificate in Mozilla’s root store.
2. 2008-08-14 Certigna provided CP/CPS excerpts describing SSL and email validation practices.
3. 2009-02-02 Mozilla opened the first public discussion period for the inclusion request.
4. 2009-03-17 Mozilla approved the Certigna root for email and SSL trust bits and deferred code-signing.

1. 2007-08-22 Dhimyotis representative — Certigna opened the request and listed its root and subordinate certificates, audit status, and contact details.
2. 2007-08-28 Mozilla representative — Mozilla asked Certigna to complete the CA inclusion form with root-certificate details.
3. 2008-07-29 Hecker representative — Frank Hecker assigned Kathleen Wilson to gather information for the request.
4. 2008-07-30 Mozilla representative — Kathleen requested translations and policy details needed to verify validation practices and problematic-practice questions.
5. 2008-08-22 Dhimyotis representative — Certigna answered questions about whois checks, email verification, and its planned code-signing work.
6. 2008-11-05 Mozilla representative — Kathleen reported that LSTI had provided a public ETSI 102.042 compliance statement and that the pending list had been updated.
7. 2009-02-13 Mozilla representative — Kathleen closed the first public discussion and listed action items about public CPS material and audit documentation.
8. 2009-03-17 Mozilla representative — Kathleen summarized the assessment and recommended approval for the Certigna root.
9. 2009-03-17 Hecker representative — Frank Hecker approved the request for email and SSL trust bits and deferred code-signing to a separate request.
10. 2009-03-17 Mozilla representative — Kathleen filed bug 483889 for the NSS implementation work and noted code-signing would need a new request.