FNMT Root Inclusion Request

2015-10-21 Thread Kathleen Wilson
FNMT has applied to include the “AC RAIZ FNMT-RCM” root certificate and enable the Websites trust bit. Fábrica Nacional de Moneda y Timbre (FNMT) is a government agency that provides services to Spain as a national CA. The request is documented in the following bug:

Re: Certum Root Renewal Request

2015-10-21 Thread Kathleen Wilson
On 10/1/15 3:44 PM, Kathleen Wilson wrote: Unizeto Certum has applied to include the “Certum Trusted Network CA 2” root certificate, turn on all three trust bits, and enable EV treatment. This is the next generation of the “Certum Trusted Network CA” root cert that was included via bug #532377.

Re: Update to phasing out SHA-1 Certs

2015-10-21 Thread Kurt Roeckx
On 2015-10-20 20:39, Kathleen Wilson wrote: - We are re-evaluating when we should start rejecting all SHA-1 SSL certificates (regardless of when they were issued). As we said before, the current plan is to make this change on January 1, 2017. However, in light of recent attacks on SHA-1, we