Second discussion for GeoTrust EV Enablement Request

[Kathleen Wilson]

The first discussion of GeoTrust�s EV Enablement Request is here:

https://groups.google.com/d/msg/mozilla.dev.security.policy/69RJvHpVS7Q/Mi301wkuCtUJ

The request is documented in the following bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=539255

And in the pending certificates list here:
http://www.mozilla.org/projects/security/certs/pending/#Symantec%20/%20GeoTrust

The discussion resulted in the following action item.
�ACTION Symantec/GeoTrust: Provide the information listed in
https://wiki.mozilla.org/CA:SubordinateCA_checklist
for the GeoTrust root certificates that are currently included in NSS.
After this information is provided in the bug, I will start a new
discussion for this request.�

Symantec attached their response to the bug:
https://bugzilla.mozilla.org/attachment.cgi?id=707878
https://bugzilla.mozilla.org/show_bug.cgi?id=539255#c15

Important notes:

+ These answers are not about this SHA256 root certificate, because
Symantec has no plans to issue external SubCAs in this hierarchy.

+ The answers are regarding other GeoTrust root certs that are included
in NSS.

+ The "external SubCA" product has been EOL'd. There are still a few
remaining customers, but no new �external SubCA� customers will be added.


This begins the second discussion of the request from Symantec/GeoTrust
to enable EV for the �GeoTrust Primary Certification Authority - G3�
root certificate that is already included in NSS.

Kathleen

[Kathleen Wilson]

Are there any further questions or comments regarding this request from
Symantec/GeoTrust?

If not, I will close this discussion. Then, after GeoTrust creates the
intermediate EV cert and successfully completes the EV testing, I will
recommend approval in the bug.

Thanks,
Kathleen

[Kathleen Wilson]

I am now closing this discussion.

I will track the action item to complete EV testing in the bug. After I
have confirmed that the testing has been successfully completed I will
recommend approval in the bug for the request to enable EV for the
�GeoTrust Primary Certification Authority - G3� root certificate.

Any further follow-up on this request should be handled in the bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=539255

Thanks,
Kathleen