← Taiwan-CA Inc. (TWCA) cases
Bugzilla #745671 Trust Bit Enablement

TWCA request to enable EV and turn on the Code Signing trust bit for TWCA Root Certification Authority

RESOLVED FIXED Taiwan-CA Inc. (TWCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

TWCA requested Mozilla approval to enable EV and turn on the Code Signing trust bit for its already-included "TWCA Root Certification Authority" root certificate. The request also discussed existing website and email trust bits, and TWCA later clarified that it wanted code signing enabled and EV turned on for the root. Mozilla opened public discussion after verifying the submitted CA information, EV testing, and audit materials. During the review, TWCA updated its CP/CPS documents, fixed an OCSP server issue, and provided additional EV OID information. Mozilla then approved the request and said it would file follow-up bugs for the NSS and PSM changes. The bug was resolved as FIXED.

Model: gpt-5.4-mini Generated: 2026-06-13 12:19 UTC Revised: 2026-06-16 18:11 UTC Confidence: 0.98 33 comments
Chronology
  1. TWCA requested EV enablement for the TWCA Root Certification Authority and provided audit and CPS links.
  2. Mozilla opened public discussion for turning on the Code Signing trust bit and enabling EV for the TWCA root.
  3. Mozilla approved enabling EV and the Code Signing trust bit for the TWCA root and filed follow-up bugs.
Thread Activity
  1. Taiwan-CA Inc. (TWCA) — TWCA asked to enable EV for the TWCA Root Certification Authority and later noted it also wanted S/MIME and object signing trust bits.
  2. Mozilla representative — Mozilla clarified that email and websites trust bits were already enabled and that the request was specifically for code signing and EV.
  3. Taiwan-CA Inc. (TWCA) — TWCA said the CRL IDP extension had been removed from the EVSSL certificate CRL.
  4. Kuix representative — Kai Engert said the EV test data appeared correct and attached the test_ev_roots file.
  5. Mozilla representative — Mozilla asked TWCA whether planned CP/CPS compliance items had been completed and requested updated documents.
  6. Taiwan-CA Inc. (TWCA) — TWCA provided updated WebTrust seal URLs and updated EVSSL CA CPS and sub-CA CPS URLs.
  7. Mozilla representative — Mozilla confirmed the EV test site was working again and opened the first public discussion period.
  8. Mozilla representative — Mozilla summarized the assessment and stated an intent to approve the request.
  9. Mozilla representative — Mozilla approved the request and said it would file NSS and PSM bugs for the actual changes.
Participants
Taiwan-CA Inc. (TWCA) Mozilla representative Kuix representative Docusign representative
Related Bugzilla IDs Mentioned
Similar Local Cases
#1166723 RESOLVED Trust Bit Enablement Public Discussion Opened By Ca Single Ca Owner Opened 2015-05-20 · Closed 2022-11-14 · 75% similar
Request for additional D-Trust root Integration with trust bit "email" (Non-TLS).
#515425 RESOLVED Trust Bit Enablement Opened 2009-09-09 · Closed 2022-11-14 · 72% similar
Request to enable code-object-signing "trust bit" for DigiCert's three Root CAs
#1176188 RESOLVED Trust Bit Enablement Opened 2015-06-19 · Closed 2022-11-14 · 72% similar
Enable email trust bit for Actalis Authentication Root CA
#1711598 RESOLVED Trust Bit Enablement Opened 2021-05-17 · Closed 2023-05-03 · 58% similar
Provide APIs and OAuth for Microsoft to automate their root store updates to CCADB
#2019619 ASSIGNED Trust Bit Enablement Opened 2026-02-26 Still Open · 58% similar
Google Trust Services Root Strategy Plan
#1277336 RESOLVED Root Inclusion Trust Bit Enablement Ev Enablement Opened 2016-06-01 · Closed 2022-11-14 · 55% similar
Add SSL.com root certificate(s)
#577665 RESOLVED Root Inclusion Trust Bit Enablement Opened 2010-07-09 · Closed 2022-11-14 · 54% similar
Add Trustis FPS Root CA certificate
#518503 RESOLVED Root Inclusion Opened 2009-09-24 · Closed 2022-11-14 · 48% similar
Add TWCA Root Certificate

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action