Atos TrustedRoot 2011 root inclusion request and public discussion

Atos requested that Mozilla add the Atos TrustedRoot Root CA certificate to the trusted root CA list and enable all three trust bits. The request included CA information, CPS, subscriber agreement, and supporting certificates, and Mozilla began information verification and public discussion. During the review, Atos provided clarifications about its CA hierarchy, annual audits, OCSP configuration, and subscriber validation practices, and later supplied updated CPS and audit documents. Mozilla opened a first and then a second public discussion period, and after the assessment Mozilla approved inclusion of the "Atos TrustedRoot 2011" root certificate for websites, email, and code signing. The bug was then resolved with the related NSS implementation tracked in bug 938814.

1. 2011-12-16 Atos requested inclusion of the Atos TrustedRoot Root CA certificate in Mozilla’s trusted root CA list.
2. 2013-03-14 Mozilla opened the first public discussion period for the Atos TrustedRoot 2011 root certificate.
3. 2013-10-01 Mozilla opened the second public discussion period for the Atos TrustedRoot 2011 root certificate.
4. 2013-11-14 Mozilla approved inclusion of the Atos TrustedRoot 2011 root certificate and all three trust bits.

1. 2011-12-16 Atos — Atos asked Mozilla to add the Atos Trustcenter Root CA to the trusted root CA list and provided initial documentation and contact details.
2. 2012-02-02 Atos — Atos answered questions about external RAs, annual audits, subscriber authorization for code signing, and IDN handling.
3. 2012-04-10 Mozilla representative — Mozilla attached a completed CA information document and said the request had been added to the queue for public discussion.
4. 2013-01-24 Atos — Atos responded to Mozilla’s CA Communication with statements about multi-factor authentication, CA hierarchy, Baseline Requirements compliance, and certificate database checks.
5. 2013-03-14 Mozilla representative — Mozilla opened the first public discussion period for the Atos TrustedRoot 2011 root certificate.
6. 2013-06-07 Mozilla representative — Mozilla closed the first discussion round and asked Atos to complete a Baseline Requirements audit and attach the audit statement.
7. 2013-08-29 Atos — Atos said it had completed the Baseline Requirements audit, updated OCSP behavior, and attached the audit statement, CPS, and related documents.
8. 2013-09-19 Atos — Atos said the ETSI certificate was available on the DQS website and that CPS version 1.6 had been added to the Atos website.
9. 2013-10-01 Mozilla representative — Mozilla opened the second public discussion period for the request and corrected the discussion thread title.
10. 2013-11-07 Mozilla representative — Mozilla posted its assessment summary and said it intended to approve the request.
11. 2013-11-14 Mozilla representative — Mozilla approved inclusion of the Atos TrustedRoot 2011 root certificate and said it would file the NSS bug for the approved changes.
12. 2013-11-14 Mozilla representative — Mozilla filed bug 938814 against NSS for the actual changes.