E-Guven S2 and S3 Root inclusion to Mozilla browser
E-Guven requested inclusion of two self-signed root certificates, “E-GUVEN Kok Elektronik Sertifika Hizmet Saglayicisi S2” and “E-GUVEN Kok Elektronik Sertifika Hizmet Saglayicisi S3,” issued on 11 March 2013, in Mozilla browsers. Mozilla’s CA Program accepted the bug and asked E-Guven to provide the information listed in Mozilla’s CA information checklist, noting a backlog and that the request would be handled when the Information Verification phase began. E-Guven later stated it was preparing requested documents, including updated documentation, a root hierarchy attachment, an ISO 27001 audit report, and an ETSI 101-456 compliance report. In 2015, Mozilla reported it was still waiting for the CA to provide the remaining information from the checklist. Mozilla also stated that due to ongoing concerns about E-Guven’s audit statements, it was removing the currently-included E-Guven root from NSS in Bugzilla Bug #1145270, and that E-Guven could re-apply in the future by opening a new Bugzilla Bug if it met Mozilla and CA/Browser Forum requirements and provided corresponding annual audit statements. The bug is marked RESOLVED with resolution WONTFIX.
- E-Guven issued two self-signed root certificates (S2 and S3).
- E-Guven filed a request to include the S2 and S3 root certificates in Mozilla browsers.
- E-Guven submitted requested documentation attachments (root hierarchy, ISO 27001 audit report, and ETSI 101-456 compliance report).
- Mozilla reported it was still waiting for the remaining information from the Mozilla information checklist.
- Mozilla removed the currently-included E-Guven root from NSS due to concerns about audit statements and indicated re-application would require meeting requirements and providing annual audit statements.
- E-guven representative — E-Guven requested inclusion of its two self-signed S2 and S3 root certificates in Mozilla browsers.
- Mozilla representative — Mozilla accepted the bug, noted a backlog, and asked E-Guven to provide the information listed in the CA information checklist.
- E-guven representative — E-Guven apologized for the delay and said it was preparing requested documents, including updates to documentation regarding updated policies.
- Mozilla representative — Mozilla stated the request was still waiting for the CA to provide the rest of the information listed in the CA information checklist.
- Mozilla representative — Mozilla said it was removing the currently-included E-Guven root from NSS due to ongoing concerns about E-Guven's audit statements, and that E-Guven could re-apply later by opening a new Bugzilla Bug with annual audit statements and meeting requirements.