April 2017 CA Communication

ACTION 3: UPDATED MOZILLA CA CERTIFICATE POLICY Versions 2.4 and 2.4.1 of Mozilla's CA Certificate Policy have been published. Differences between versions 2.4 and 2.3 (published Dec 2016), and between versions 2.4 and 2.2 (published July 2013) may be viewed on Github. Version 2.4.1 contains exactly the same normative requirements as version 2.4 but has been completely reorganized. Please review version 2.4.1 of Mozilla's CA Certificate Policy and confirm that your CA complies with it. Please note: + In addition to audit statements, the CP and CPS documents need to be submitted to Mozilla each year. + As of June 1, 2017, the audit, CP, and CPS documents must be provided in English, translated if necessary. + All submitted documentation must be openly licensed (see the policy for the exact options and terms). + Version 2.4 of Mozilla's CA Certificate Policy incorporates by reference the Common CCADB Policy and the Mozilla CCADB Policy. + The new CCADB Policy makes official a number of existing expectations regarding the CCADB. + The applicable versions of some audit criteria have been updated. + There are additional requirements on OCSP responses. + 64 bits of entropy is required in certificate serial numbers. + The requirements in both version 2.4 and 2.4.1 are immediately applicable, except for the document translation requirement which is required by June 1, 2017. Please confirm that you have reviewed version 2.4.1 of Mozilla's CA Certificate Policy.
ACTION 3 COMMENTS

CA Owner Response Response
AC Camerfirma, S.A. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Actalis Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. None
Amazon Trust Services Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Asseco Data Systems S.A. (previously Unizeto Certum) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Atos Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Autoridad de Certificacion Firmaprofesional Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Buypass Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Certicámara Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. Las version of our CPS is compliant with requirements, including OCSP and SHA256 requirements.
Certinomis / Docapost Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
China Financial Certification Authority (CFCA) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Chunghwa Telecom Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
ComSign Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Cybertrust Japan / JCSI Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
D-TRUST Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Deutscher Sparkassen Verlag GmbH (S-TRUST, DSV-Gruppe) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. DSV is the cause of shutting down the CA/certification business. There will be no new customers. At the current stage existing contract are ful-filled but not renewed. By the end of 2018 all contracts are terminated. Therefore DSV does not intend to provide an English translation for the remaining time for economical reasons. Since the vast majority of the rules and policies focus and SSL/TLS web site certificates and DSV has not and will no issue such certificates and since circumstances DSV is shuts down the business in the near future, DSV considers it an acceptable approach to not make any changes to the existing documents. Instead a remark the the CA will terminate business operations and should therefore be consider a legacy entry in the CCADB would be a valuable information for other parties.
Dhimyotis / Certigna Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
DigiCert Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. No extension required but some of the methods adopted by ballot 169 (and thus required by Mozilla's 2.4.1 policy) are very unclear. We hope that Mozilla will provide clarity around its expectations if the CAB Forum can't agree on better language going forward.
Disig, a.s. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
DocuSign (OpenTrust/Keynectis) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. Use this space to express concern or request extension to the deadline for full compliance with the updates to Mozilla's CA Certificate Policy. As we need to have the CP/CPS transated in English, we'd like to translate the final version, i.e. the one that is going to be updated by 07/21. So our target would be 09/15 to provide such a translate CP/CPS in English.
E-Tugra Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
EDICOM Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Entrust Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
GlobalSign Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
GoDaddy Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Google Trust Services LLC (GTS) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Government of Hong Kong (SAR), Hongkong Post, Certizen Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. Nil
Government of Japan, Ministry of Internal Affairs and Communications Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. Use this space to express concern or request extension to the deadline for full compliance with the updates to Mozilla's CA Certificate Policy. There is no paticular comment.
Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Government of Taiwan, Government Root Certification Authority (GRCA) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Government of The Netherlands, PKIoverheid (Logius) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. All technical requirements were already implemented previously because of our own policies. The translation of different CPS documents (CP was already translated) is unfortunately going to take longer than expected. We would like to ask for an extension of 4 months (October 1) for the translation requirement.
Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
HARICA Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
IdenTrust Services, LLC Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Internet Security Research Group (ISRG) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Izenpe S.A. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Krajowa Izba Rozliczeniowa S.A. (KIR) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
LuxTrust Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Microsec Ltd. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. Presetnly we do not propagate the nextUpdate field in our OCSP responses, we generate a new response for each incoming request based on the actual status information. After negotiating this issue we decided to propagate the nextUpdate field in the future in our OCSP responses which are used for webserver certificates. The upgrade of our system will be finished till the 31th of May 2017.
NetLock Ltd. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. I would like to ask for an extension, to bind together with Action 1. Is it possible to get an extension to 07/20/2017 for all items?
OISTE Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. OK
PROCERT Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
QuoVadis Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. Confirmed
SECOM Trust Systems CO., LTD. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
SK ID Solutions AS Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Sectigo Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
SecureTrust Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Start Commercial (StartCom) Ltd. Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
SwissSign AG Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Swisscom (Switzerland) Ltd Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Symantec Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. We intend to submit our policy and practice statements this year in the new case-based updating process very soon. We have reviewed version 2.4.1 of Mozilla CA Certificate Policy. Our policies and practices are updated such that no changes are required to reflect the points above, given that policy 2.4.1 selects an open license when one is not explicitly stated. Our next update will specify an open license standard. We expect to release an update on or before July 20, 2017.
T-Systems International GmbH (Deutsche Telekom) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017. T-Systems maintains three public trusted Root-CAs. For various reasons, we provide a CP and a CPS (both in German) per Root-CA. We annually update all these documents and in addition the CP/CPS our services. Due to time constraints (Audit, Mozilla-Communication, etc.), we are not able to offer all CP and CPS our Roots in English until June 1, 2017. We suggest to provide an English version of the CP and CPS for a specific Root-CA (e.g. our EV-Root „T-TeleSec GlobalRoot Class 3“) and the German version for the other Roots. In the next step, we would merge and translate the CP and CPS, to have just one CP and one CPS for our Roots.
Taiwan-CA Inc. (TWCA) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Telia Company (formerly TeliaSonera) Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Trustis Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
TurkTrust Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Visa Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
Web.com Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
WoSign CA Limited Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.
certSIGN Check here to confirm that Mozilla's CA Certificate and CCADB policies have been reviewed and any necessary changes to your CA's policies or practices will be made by June 1, 2017.