← Start Commercial (StartCom) Ltd. cases

Removal request of StartCom 1024 bit CA root

RESOLVED FIXED Start Commercial (StartCom) Ltd.

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

StartCom Ltd. requested the removal of its 1024-bit CA root certificate, which was added to NSS in a previous bug. The request was made due to the root's outdated key size and the successful transition of StartCom's CA business to a newer root. The CA indicated that the removal should occur between June 1, 2009, and December 31, 2009, to allow previous subscribers to access the root for legacy purposes. The request initiated discussions about the need for a formal policy regarding root certificate removals. Ultimately, the root certificate was removed from NSS as confirmed in a later bug report.

Model: gpt-4o-mini Generated: 2026-06-13 12:12 UTC Revised: 2026-06-16 18:35 UTC Confidence: 0.85 11 comments

Chronology

2009-04-07 StartCom requests removal of its 1024-bit CA root certificate.
2010-07-12 The 'Free SSL Certification Authority' root cert is removed from NSS.

Thread Activity

2009-04-07 Startcom representative — Requested the removal of the StartCom CA root due to its outdated key size.
2009-06-15 Mozilla representative — Inquired about the correct assignment for the removal request.
2009-06-15 Bolyard representative — Noted the lack of a clear policy for root certificate removals.
2010-07-12 Mozilla representative — Confirmed the removal of the root cert from NSS.

Participants

Community commenter

External References

Original Bugzilla Case

Related Bugzilla IDs Mentioned

#500043

Similar Local Cases

#1640819 RESOLVED Root Removal Opened 2020-05-26 · Closed 2022-11-14 · 66% similar

Remove CN=LuxTrust Global Root 2 root cert

AI Summary CA Owner

#605187 RESOLVED Root Removal Opened 2010-10-18 · Closed 2022-11-14 · 60% similar

Remove AOL Time Warner root certs

AI Summary CA Owner

#1420855 RESOLVED Root Removal Opened 2017-11-27 · Closed 2022-11-14 · 59% similar

Remove CA Disig Root R1

AI Summary CA Owner

#2024749 ASSIGNED Root Removal Opened 2026-03-19 Still Open · 58% similar

Firmaprofesional: Request for voluntary root removal - FIRMAPROFESIONAL CA ROOT-A WEB

AI Summary CA Owner

#1301731 RESOLVED Root Removal Certificate Misissuance Opened 2016-09-09 · Closed 2022-11-14 · 56% similar

ANSSI: problematic certificates issued by AC Infrastructure

AI Summary CA Owner

#451298 RESOLVED Ev Enablement Opened 2008-08-20 · Closed 2022-11-14 · 47% similar

Enable EV and code signing for StartCom Root

AI Summary CA Owner

#406794 RESOLVED Root Removal Opened 2007-12-04 · Closed 2022-11-14 · 47% similar

Refresh the GlobalSign Root CA cert (will be EV)

AI Summary CA Owner

#380067 RESOLVED Root Removal Root Inclusion Opened 2007-05-08 · Closed 2022-11-14 · 39% similar

Delete Visa International Root - GP2 and add Visa International Root - InfoDelivery

AI Summary CA Owner