This is to announce the beginning of the public discussion phase of the
Mozilla root CA process (see
https://wiki.mozilla.org/CA/Application_Process#Process_Overview (Steps 4
through 9) to EV-enable the NetLock Arany (Class Gold) Főtanúsítvány Root
CA, as outlined below.

This EV enablement request has been tracked in the CCADB and in Bugzilla as
follows:

https://ccadb-public.secure.force.com/mozilla/PrintViewForCase?CaseNumber=00000488

https://bugzilla.mozilla.org/show_bug.cgi?id=1579454

Mozilla is considering approving Netlock’s request. This email begins a
3-week comment period, after which, if no concerns are raised, we will
close the discussion and the request may proceed to the approval phase
(Step 10).

*Root Certificate Information:*

https://netlock.hu/tanusitvanykiadok/#arany-class-gold-fotanusitvany

https://crt.sh/?q=6C61DAC3A2DEF031506BE036D2A6FE401994FBD13DF9C8D466599274C446EC98

https://bugzilla.mozilla.org/attachment.cgi?id=365241



*CP/CPS:*

Repository location:  https://netlock.hu/aktualis-szabalyzatok/#english

Current Qualified CPS – Ver. 20210716 (July 16, 2021)

Current Non-Qualified CPS – Ver. 20200901 (Sept. 1, 2020)

Current Non-EIDAS CPS (DV SSL) – Ver. 20200731 (July 31, 2020)

Previous Mozilla CPS review (EV-only) -
https://bugzilla.mozilla.org/show_bug.cgi?id=1579454#c9

Netlock Responses to CPS Review -
https://bugzilla.mozilla.org/show_bug.cgi?id=1579454#c10



*Audits and Reported Incidents:*

Netlock’s auditor is Certop Informatikai Tanúsítási Szolgáltatások Kft. (
https://hu.certop.com/en/).  Certop last audited Netlock in September 2021.
The 2021 audit may be downloaded here:
https://it.certop.com/wp-content/uploads/2021/10/Certop_cert_Netlock_with_annex_english_2021_final_sign.pdf

Netlock’s Bugzilla-recorded incidents over the past year are:

1680378 <https://bugzilla.mozilla.org/show_bug.cgi?id=1680378>

Replacement of enduser certificates after the EVGL 1.7.4 self-audit (Open)

1716874 <https://bugzilla.mozilla.org/show_bug.cgi?id=1716874>

CA Certificate Missing from Audit Reports (Open)

1656882 <https://bugzilla.mozilla.org/show_bug.cgi?id=1656882>

Failure to revoke noncompliant ICA within 7 days (Closed)

1676367 <https://bugzilla.mozilla.org/show_bug.cgi?id=1676367>

Issuance of >398-day precertificates after 2020-09-01 (Closed)

1676440 <https://bugzilla.mozilla.org/show_bug.cgi?id=1676440>

Cumulative report connected to EV verification (Closed)

1688844 <https://bugzilla.mozilla.org/show_bug.cgi?id=1688844>

Delayed revocation report connected to ticket 1680378 (Closed)



This email begins a three-week public discussion period, which I’m
scheduling to close on or about 2-December-2021.

A representative of Netlock must promptly respond directly in the
discussion thread to all questions that are posted.



Sincerely yours,

Ben Wilson

Mozilla Root Program

-- 
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CA%2B1gtabmur%3DjYtJns%2BWTaxMSmG5eYpaR0-ST3sbM%2B%3D5N--2d%3Dg%40mail.gmail.com.

Reply via email to