Confirm, administrator
5,526
edits
Changes
added clarification that Mozilla's application process considers each root certificate
The same process is used to request:
* Root certificate inclusion Enabling EV treatment for all CAs, even if the CA an already has root certificates -included in Mozilla's root storecertificate
* Turning on additional trust bits for an already-included root certificate
* Enabling EV treatment for an Including a new root certificate, even if the CA already-has root certificates included in Mozilla's root certificatestore
* Including a renewed version of an already-included root certificate
** Consideration for inclusion is per root certificate (defined as the combination of Subject DN, Subject Public Key Information, and Subject Key Identifier). Approval of one root certificate does '''not''' imply that other root certificates owned by the same CA would be accepted.
The overall steps of the CA certificate inclusion and update process are as follows. There are [[CA/Bug_Triage#Root_Inclusion.2FChange_requests_and_EV_Treatment_Enablement_Requests|Bugzilla Bug Whiteboard tags]] corresponding to many of these steps.
