CA

CA-related Documents (Work in Progress)

Note: This page and related pages contain unofficial documents related to Mozilla and Certification Authorities, including draft policies, notes, and related information. The www.mozilla.org site contains all official CA-related Mozilla documents, including the Mozilla CA Certificate Policy, the list of pending CA requests, and the list of included CAs.

Work in progress

• Tentative schedule for CA evaluations
• Checklist of CA information required to process a CA's application
• Recommended practices for CAs wishing to have their root CA certificates included in Mozilla products
• Potentially problematic CA practices. This discusses CA practices that are not explicitly forbidden by the Mozilla CA policy, and do not necessarily pose security issues, but that some people have expressed concerns about and that may cause delays in evaluating and approving CA applications. Some of these practices may be addressed in future versions of the Mozilla CA policy.
• EV certificates and revocation checking. This discusses how revocation checking via OCSP or CRLs affects the UI treatment of EV certificates.
• Applying for inclusion of CA root certificates. This gives step-by-step instructions on how to apply to Mozilla to have your CA's root certificate(s) included in Mozilla products.
• Glossary of CA- and Mozilla-related terms
• CA:Certificate Download Specification

Templates

The following are templates created by Gerv Markham for use by the Mozilla representative(s) responsible for working on CA requests. Except as noted the templates are used in creating comments for the bug report associated with a CA request.

• CA information
• Documents not in English
• Please confirm information
• Tentative approval
• Tentative approval (newsgroup post)
• Inclusion in NSS