CA/Included Certificates: Difference between revisions

Rearrange and make Firefox link more prominent
(Clean up and focus)
(Rearrange and make Firefox link more prominent)
Line 3: Line 3:
The Mozilla CA Certificate Program's list of included root certificates is stored in a file called [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt] in the Mozilla source code management system.
The Mozilla CA Certificate Program's list of included root certificates is stored in a file called [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt] in the Mozilla source code management system.


The Common CA Database, which we use to manage the program, can also produce useful lists of certificates with their metadata:
If you are '''choosing a CA for your website''', we have a list of [https://mozillacaprogram.secure.force.com/CA/CACertificatesInFirefoxReport all CAs that Firefox trusts for SSL/TLS], together with contact information and geographical focus for each CA.
 
If you are '''embedding our root store''', you need to know that we have imposed some restrictions that on certain CAs or certificates which are not encoded in certdata.txt. These are [[CA:Root_Store_Trust_Mods|documented]] on a best-efforts basis.


* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReport Included CA Certificates] (HTML)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReport Included CA Certificates] (HTML)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReportCSVFormat Included CA Certificates] (CSV)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReportCSVFormat Included CA Certificates] (CSV)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReportPEMCSV Included CA Certificates] (CSV with PEM of raw certificate data)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReportPEMCSV Included CA Certificates] (CSV with PEM of raw certificate data)
* [https://mozillacaprogram.secure.force.com/CA/CACertificatesInFirefoxReport Included CA Certificates] in the latest version of Firefox
Restrictions that the root program has chosen to place on certain CAs or certificates and which are not encoded in the main root store file, [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt], are [[CA:Root_Store_Trust_Mods|documented]] on a best-efforts basis.
Account confirmers, Anti-spam team, Confirmed users, Bureaucrats and Sysops emeriti
4,925

edits