Bug 141757 - Add DigiCert CA Root Certificates (3 Roots, 1 marked as EV)
Summary: Add DigiCert CA Root Certificates (3 Roots, 1 marked as EV)
Status: RESOLVED FIXED
Alias: None
Product: kio
Classification: Frameworks and Libraries
Component: kssl (show other bugs)
Version: unspecified
Platform: unspecified Linux
: NOR wishlist
Target Milestone: ---
Assignee: George Staikos
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-02-15 21:17 UTC by Ken Bretschneider
Modified: 2007-03-07 01:14 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ken Bretschneider 2007-02-15 21:17:54 UTC
Version:            (using KDE KDE 3.5.6)
Installed from:    Unspecified

DigiCert® (DigiCert, Inc.) is a US-based CA located in Lindon, UT. DigiCert provides High-Assurance SSL Certificates (soon to offer other digital signature products including email and code-signing) to some of the most respected and prestigious organizations in the world, including national and state governments, educational and medical institutions, and Fortune 500 companies. DigiCert is ranked in the top 10 of commercial CAs regarding market share of SSL Server Certificates as reported by respected industry surveys.

DigiCert is a WebTrust Certified Certificate Authority (https://cert.webtrust.org/ViewSeal?id=558), a member of the CA/Browser Forum (http://www.cabforum.org/forum.html) and the W3C Consortium (http://www.w3.org/Consortium/Member/Testimonial/Home/home-1084). 

DigiCert is requesting inclusion of the following (3) CA Root Certificates (one to be marked as EV):

DigiCert Assured ID Root CA
http://www.digicert.com/CACerts/DigiCertAssuredIDRootCA.crt 
Valid from: Thursday, November 09, 2006 5:00:00 PM
Valid to: Sunday, November 09, 2031 5:00:00 PM
Thumbprint: 05 63 b8 63 0d 62 d7 5a bb c8 ab 1e 4b df b5 a8 99 b2 4d 43
Purposes/Usage: ALL (SSL-enabled servers, digitally-signed and/or encrypted
email, digitally-signed executable code objects, time-stamping)
CRL: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl 
OCSP: Active

DigiCert Global Root CA
http://www.digicert.com/CACerts/DigiCertGlobalRootCA.crt 
Valid from: Thursday, November 09, 2006 5:00:00 PM
Valid to: Sunday, November 09, 2031 5:00:00 PM
Thumbprint: a8 98 5d 3a 65 e5 e5 c4 b2 d7 d6 6d 40 c6 dd 2f b1 9c 54 36
Purposes/Usage: ALL (SSL-enabled servers, digitally-signed and/or encrypted
email, digitally-signed executable code objects, time-stamping)
CRL: http://crl3.digicert.com/DigiCertGlobalRootCA.crl 
OCSP: Active

EV
DigiCert High Assurance EV Root CA
http://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.crt 
Valid from: Thursday, November 09, 2006 5:00:00 PM
Valid to: Sunday, November 09, 2031 5:00:00 PM
Thumbprint: 5f b7 ee 06 33 e2 59 db ad 0c 4c 9a e6 d3 8f 1a 61 c7 dc 25
Purposes/Usage: ALL (SSL-enabled servers, digitally-signed and/or encrypted
email, digitally-signed executable code objects, time-stamping)
CRL: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl 
OCSP: Active

End-User SSL Certificates will be issued from Sub-CA-Root-Certificates not directly from the Embedded-Roots listed above.

The above listed Root Certificates have been included in Microsoft's most recent root update (Jan 2007) and we have received corespondense that Apple will be including us in their next update. Other major browsers (eg. Firefox), mobile devices and mis. hardware/software platforms are in the works.

DigiCert's Legal Repository (containing our CPS(s), Subscriber Agreement(s), Relying Party Agreement, Privacy Policy and Terms & Conditions) can be found at the following URL: http://www.digicert.com/ssl-cps-repository.htm 

DigiCert provides 24 Hour Personalized Support (including; Phone, Live-Chat and Email). We also include detailed support documentation on our website. We are dedicated to providing the best support in our industry. DigiCert is also committed to best practices regarding our Validation/Vetting procedures.

Thank you for your time and consideration. If you require additional information, please contact:

Ken Bretschneider
DigiCert, Inc.
ken@digicert.com
Off: 1-801-413-2896
Mob: 1-801-368-0963
http://www.digicert.com
Comment 1 George Staikos 2007-03-07 01:14:11 UTC
SVN commit 640146 by staikos:

and some high assurance and regular roots
BUGS: 140249, 141701, 141757


 A             DigiCertAssuredIDRootCA.pem  
 A             DigiCertGlobalRootCA.pem  
 A             DigiCertHighAssuranceEVRootCA.pem  
 M  +166 -0    caroot/ca-bundle.crt  
 A             globalsign-root-r2.pem  
 M  +36 -0     ksslcalist  
 A             qvrca2.pem  
 A             qvrca3.pem