Preview of the 1.138 release now available

[David Groep]

Dear all,

The preview of IGTF release 1.138 is now available for final review from
the URL below, with a scheduled release date of November 24th:

https://dl.igtf.net/distribution/tests/PMA-PRIVATE-PREVIEW/releases/1.138/

with:

Changes from 1.137 to 1.138
---------------------------
(24 November 2025)

* Add new REUNA Issuing CA and updated RPDNC for HLCA emSign Trusted Root (CL)
* Withdraw superseded KEK CA (JP)
* Update RCauth Pilot ICA G1 with extended validity period (EU)

The planned release date to EGI and other major relying parties, is planned
for Nov 17 (one week before). The IGTF release for Nov 24th, so that KEK has
the maximum overlap period - the KEK CA expired on the 25th.

The data for the new REUNA ICA is not yet complete - this will be addressed
in the final version (a new CRL URL and CA URL are still in the works).

Best,
DavidG.

--
David Groep

** Nikhef, Dutch National Institute for Subatomic Physics, PDP programme **
** Maastricht University, FSE - Department of Advanced Computing Sciences **
** Visiting address: Science Park 105 room H229b, NL 1098 XG Amsterdam NL **
** PHS1 Room C4.032, Paul-Henri Spaaklaan 1, 6229 EN, Maastricht **
** Phone: +31 20 5922179, keybase.io: dlg, Signal username: davidg.01 **
** PGP: 0xD80134C2 308E076A FP: 2facebea12803ba145685a21d80134c2308e076a **

[Derek Simmel]

David,

I reached out to Stephen Davidson <Stephen....@digicert.com> and Darin Andrew <darin....@digicert.com> a month ago to ask if DigiCert is interested in continuing their participation in TAGPMA. I received no response from them. DigiCert hasn't attended a TAGPMA meeting in at least a year, and they do not have a current membership letter on file.

I am therefore suspending DigiCert effective immediately. Please remove all DigiCert trust anchors from the IGTF distribution.

- Derek

>>>
>>> On 5 November 2025 14:42:39 CET, Derek Simmel <dsi...@psc.edu> wrote:
>>>> David,
>>>>
>>>> TAGPMA recently approved accreditation for Google Trust Services as a DCVOTA CA authentication provider. We also (re) approved the REUNA CA (classic) with their new implementation employing eMudhra for CA services.
>>>>
>>>> We need to gather the trust anchor information to add/update in the distribution. I will work with both of these to get that info to you ASAP.
>>>>
>>>> - Derek

>>>>> To unsubscribe from this group and stop receiving emails from it, send an email to tagpma-genera...@tagpma.org.
>>>>>

---
Derek Simmel
Pittsburgh Supercomputing Center
+1 (412) 268-1035

[David Groep]

Hi Derek, all,

I'll build a new preview tomorrow with this change included.
According to the Australians, DigiCert stopped service there
entirely as of May this year or so ...

DavidG.