E-Guven root inclusion request for Mozilla trust store

E-Guven requested Mozilla inclusion of its root certificate, “E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi,” and asked for the websites and email trust bits to be enabled. Mozilla reviewed E-Guven’s CP/CPS materials, validation procedures, certificate hierarchy, and audit statements, and asked for additional documentation and clearer, copyable policy text during the review. E-Guven provided updated documents, a published validation plan, and a newer ETSI compliance statement dated 31.12.2009, which Mozilla independently confirmed with the ICTA. Mozilla then opened public discussion, summarized the request as meeting the stated requirements, and later approved inclusion of the root with web and email trust bits. Mozilla also filed a separate NSS bug, 571932, to make the actual changes, and later confirmed the root was present as a built-in object token in Firefox 3.6.12.

1. 2009-02-02 E-Guven requested Mozilla inclusion of its root certificate for web and email trust.
2. 2010-04-23 Mozilla opened public discussion for the E-Guven root inclusion request.
3. 2010-06-14 Mozilla approved inclusion of the E-Guven root certificate with websites and email trust bits.
4. 2010-06-14 Mozilla filed NSS bug 571932 to implement the approved root changes.

1. 2009-02-02 E-guven representative — E-Guven opened the request and explained why it wanted Mozilla to include its root certificate.
2. 2009-02-02 Mozilla representative — Mozilla accepted the bug and asked E-Guven to provide the information checklist items.
3. 2009-03-13 Mozilla representative — Mozilla requested CP/CPS links, validation details, a test site, problematic-practices information, and a more recent audit report.
4. 2009-03-16 E-guven representative — E-Guven answered the requested questions and said its latest audit document was attached.
5. 2009-09-30 Mozilla representative — Mozilla moved the request to the public discussion queue and said approval would depend on a qualifying audit.
6. 2010-01-12 Mozilla representative — Mozilla confirmed the authenticity of the newly posted audit statement after contacting the ICTA.
7. 2010-05-26 E-guven representative — E-Guven said it had updated and published its documents on its website, including updates to verification steps and intermediate CA issuance.
8. 2010-06-03 Mozilla representative — Mozilla summarized the assessment and said it intended to approve the request.
9. 2010-06-14 Mozilla representative — Mozilla approved the request and said it would file the NSS bug for the actual changes.