CA/Included Certificates: Difference between revisions

From MozillaWiki
< CA
Jump to navigation Jump to search
(Tweak link and add (HTML))
(Move included CAs to their own page)
Line 3: Line 3:
The Mozilla CA Certificate Program's list of included root certificates is stored in a file called [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt] in the Mozilla source code management system.
The Mozilla CA Certificate Program's list of included root certificates is stored in a file called [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt] in the Mozilla source code management system.


If you are '''choosing a CA for your website''', we have a list of [https://ccadb-public.secure.force.com/mozilla/CACertificatesInFirefoxReport all CAs that Firefox trusts for SSL/TLS], together with contact information and geographical focus for each CA.
If you are '''choosing a CA to provide a certificate for your website''', we have a list of [https://ccadb-public.secure.force.com/mozilla/CACertificatesInFirefoxReport all root certificates that Firefox trusts for SSL/TLS], together with contact information and geographical focus for the owning CA.


If you are '''embedding our root store''', you need to know that we have imposed some restrictions that on certain CAs or certificates which are not encoded in certdata.txt. These are [[CA/Additional_Trust_Changes|documented]] on a best-efforts basis.
If you are '''embedding our root store''', you need to know that we have imposed some restrictions that on certain CAs or certificates which are not encoded in certdata.txt. These are [[CA/Additional_Trust_Changes|documented]] on a best-efforts basis.
* [https://ccadb-public.secure.force.com/mozilla/CAInformationReport Information about Participating CAs] (HTML)
 
* [https://ccadb-public.secure.force.com/mozilla/CAInformationReportCSVFormat Information about Participating CAs] (CSV)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport Included CA Certificates] (HTML)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport Included CA Certificates] (HTML)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportCSVFormat Included CA Certificates] (CSV)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportCSVFormat Included CA Certificates] (CSV)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportPEMCSV Included CA Certificates] (CSV with PEM of raw certificate data)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportPEMCSV Included CA Certificates] (CSV with PEM of raw certificate data)

Revision as of 09:48, 12 June 2017

Mozilla Included CA Certificate List

The Mozilla CA Certificate Program's list of included root certificates is stored in a file called certdata.txt in the Mozilla source code management system.

If you are choosing a CA to provide a certificate for your website, we have a list of all root certificates that Firefox trusts for SSL/TLS, together with contact information and geographical focus for the owning CA.

If you are embedding our root store, you need to know that we have imposed some restrictions that on certain CAs or certificates which are not encoded in certdata.txt. These are documented on a best-efforts basis.