← WoSign CA Limited cases
Bugzilla #851435 Ca Certificate Root Program Ca Certificate Compliance

WoSign request to include two root certificates and enable EV treatment

RESOLVED FIXED WoSign CA Limited
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

WoSign opened this case in 2013 to request Mozilla inclusion of two root certificates: “Certification Authority of WoSign” and “CA 沃通根证书.” The request also asked Mozilla to turn on all three trust bits for both roots and enable EV treatment. Mozilla reviewed the submission through information gathering, public discussion, and audit follow-up, and WoSign provided updated root certificates, test websites, and audit materials over time. In May 2014, Mozilla approved inclusion of the two roots and said it would file the NSS and PSM bugs for the actual changes. The thread later includes follow-up discussion about audit coverage, BR compliance, and later WebTrust audit reports, but the inclusion request itself was approved.

Model: gpt-5.4-mini Generated: 2026-06-13 13:01 UTC Revised: 2026-06-16 17:28 UTC Confidence: 0.98 73 comments
Chronology
  1. WoSign requested Mozilla inclusion of two root certificates for its CA hierarchy.
  2. Mozilla approved inclusion of the two WoSign roots with EV enabled.
  3. NSS changes containing the WoSign roots were released.
Thread Activity
  1. WoSign CA Limited — WoSign opened the bug and asked Mozilla to include its two roots, citing its CA operations and WebTrust audit.
  2. Mozilla representative — Mozilla accepted the bug and said it would proceed through the information verification phase.
  3. Mozilla representative — Mozilla closed the first public discussion and asked WoSign to resolve issues and obtain a new full audit covering the new roots.
  4. Mozilla representative — Mozilla opened the second public discussion for inclusion of the two named roots with EV treatment.
  5. Mozilla representative — Mozilla posted its assessment summary and listed the root URLs, test websites, and OCSP information.
  6. Mozilla representative — Mozilla approved inclusion of “Certification Authority of WoSign” and “CA 沃通根证书” and said it would file the NSS and PSM bugs.
  7. Mozilla representative — Mozilla filed bug 1017295 against NSS and bug 1017299 against PSM for the actual changes.
Participants
WoSign CA Limited Mozilla representative Rossde representative Community commenter
Related Bugzilla IDs Mentioned
Similar Local Cases
#467891 RESOLVED Ca Certificate Root Program Root Inclusion Opened 2008-12-04 · Closed 2022-11-14 · 85% similar
Add "D-TRUST Root Class 3 CA 2 2009" and "D-TRUST Root Class 3 CA 2 EV 2009"
#455878 RESOLVED Ca Certificate Root Program Root Inclusion Opened 2008-09-18 · Closed 2022-11-14 · 82% similar
Add CA Disig root certificate into browser
#1102143 RESOLVED Ca Certificate Root Program Ca Documents Opened 2014-11-20 · Closed 2022-11-14 · 82% similar
Add Renewed Autoridad de Certificacion Firmaprofesional root certificate
#520557 RESOLVED Ca Certificate Root Program Opened 2009-10-05 · Closed 2022-11-14 · 82% similar
Add Actalis Authentication Root CA certificate
#1710831 RESOLVED Ca Certificate Root Program Root Inclusion Opened 2021-05-12 · Closed 2023-08-01 · 81% similar
Add LAWtrust Root CA2 to NSS
#1403453 RESOLVED Ca Certificate Root Program Opened 2017-09-27 · Closed 2022-11-14 · 80% similar
Add certSIGN Root CA G2 certificate
#359069 RESOLVED Ca Certificate Root Program Opened 2006-11-01 · Closed 2022-11-14 · 79% similar
Request to add two additional IdenTrust root CA certificates
#393166 RESOLVED Ca Certificate Root Program Root Inclusion Public Discussion Opened 2007-08-22 · Closed 2022-11-14 · 78% similar
Add Certigna certificates to Mozilla root CA list

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action