Netlock root rollover and inclusion request for NetLock Arany (Class Gold) Főtanúsítvány

Netlock opened this bug to request inclusion of a new root certificate as part of a rollover from four existing built-in Netlock roots to a new common root. The request also sought trust-bit enablement for websites, email, and code signing, and it included subordinate CA information for internally operated and externally operated sub-CAs. Mozilla asked for translated CPS material, hierarchy details, CRL and OCSP information, subordinate CA checklists, a test website, and audit evidence. Netlock provided translated CPS documents, subordinate checklists, CRL and OCSP details, and audit materials, and Mozilla later confirmed that the request was ready for public discussion. After public discussion, Mozilla approved inclusion of the NetLock Arany (Class Gold) Főtanúsítvány root certificate with web sites, email, and code signing trust bits, and filed NSS bug 532201 for the actual changes. An action item remained for Netlock to consolidate its SSL domain-validation documentation into the new CPS, and Netlock later said that work was still in process.

1. 2009-03-02 Netlock requested rollover to a new common root for its existing built-in roots.
2. 2009-11-12 Mozilla opened first public discussion for inclusion of the new NetLock Arany root with all three trust bits.
3. 2009-12-01 Mozilla approved inclusion of the new root with web sites, email, and code signing trust bits.
4. 2009-12-01 Mozilla filed NSS bug 532201 for the approved root changes.

1. 2009-03-02 Netlock — Netlock said it wanted to start a rollover of its existing roots and include a new root certificate.
2. 2009-03-02 Mozilla representative — Mozilla accepted the bug and began information gathering and verification.
3. 2009-03-05 Netlock — Netlock answered Mozilla’s questions about hierarchy, subordinate CAs, CRL availability, and EV timing.
4. 2009-03-20 Mozilla representative — Mozilla asked for clarification about the externally operated sub-CAs and what was needed before public discussion.
5. 2009-03-21 Community commenter — Netlock confirmed that MKB and MNB only issue certificates to their own employees and provided hierarchy plans.
6. 2009-05-20 Netlock — Netlock provided audit-related attachments and said the new root was covered by the latest audit report.
7. 2009-05-29 Mozilla representative — Mozilla said the necessary information had been gathered and placed the request in the queue for public discussion.
8. 2009-11-12 Mozilla representative — Mozilla opened the first public discussion period for the request.
9. 2009-11-25 Mozilla representative — Mozilla summarized the request and noted the remaining action item to consolidate SSL domain-validation documentation into the new CPS.
10. 2009-12-01 Mozilla representative — Mozilla approved the request and said it would file the NSS bug for the changes.
11. 2010-04-28 Netlock — Netlock said the CPS work was under process and that it would post the updated links when accepted.