TWCA request to enable EV and turn on the Code Signing trust bit for TWCA Root Certification Authority
TWCA requested Mozilla approval to enable EV and turn on the Code Signing trust bit for its already-included "TWCA Root Certification Authority" root certificate. The request also discussed existing website and email trust bits, and TWCA later clarified that it wanted code signing enabled and EV turned on for the root. Mozilla opened public discussion after verifying the submitted CA information, EV testing, and audit materials. During the review, TWCA updated its CP/CPS documents, fixed an OCSP server issue, and provided additional EV OID information. Mozilla then approved the request and said it would file follow-up bugs for the NSS and PSM changes. The bug was resolved as FIXED.
- TWCA requested EV enablement for the TWCA Root Certification Authority and provided audit and CPS links.
- Mozilla opened public discussion for turning on the Code Signing trust bit and enabling EV for the TWCA root.
- Mozilla approved enabling EV and the Code Signing trust bit for the TWCA root and filed follow-up bugs.
- Taiwan-CA Inc. (TWCA) — TWCA asked to enable EV for the TWCA Root Certification Authority and later noted it also wanted S/MIME and object signing trust bits.
- Mozilla representative — Mozilla clarified that email and websites trust bits were already enabled and that the request was specifically for code signing and EV.
- Taiwan-CA Inc. (TWCA) — TWCA said the CRL IDP extension had been removed from the EVSSL certificate CRL.
- Kuix representative — Kai Engert said the EV test data appeared correct and attached the test_ev_roots file.
- Mozilla representative — Mozilla asked TWCA whether planned CP/CPS compliance items had been completed and requested updated documents.
- Taiwan-CA Inc. (TWCA) — TWCA provided updated WebTrust seal URLs and updated EVSSL CA CPS and sub-CA CPS URLs.
- Mozilla representative — Mozilla confirmed the EV test site was working again and opened the first public discussion period.
- Mozilla representative — Mozilla summarized the assessment and stated an intent to approve the request.
- Mozilla representative — Mozilla approved the request and said it would file NSS and PSM bugs for the actual changes.