JDK-8204102 : Release Note: Removal of Several Symantec Root CAs
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 6u211,7u201,8u191,11
  • Priority: P3
  • Status: Closed
  • Resolution: Delivered
  • Submitted: 2018-05-30
  • Updated: 2019-04-09
  • Resolved: 2018-06-07
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 6 JDK 7 JDK 8
11Resolved 6u211Resolved 7u201Resolved 8u191Resolved
Description
The following Symantec root certificates are no longer in use and have been removed:
+ Symantec
  + equifaxsecureca

    DN: OU=Equifax Secure Certificate Authority, O=Equifax, C=US

  + equifaxsecureglobalebusinessca1

    DN: CN=Equifax Secure Global eBusiness CA-1, O=Equifax Secure Inc., C=US

  + equifaxsecureebusinessca1

    DN: CN=Equifax Secure eBusiness CA-1, O=Equifax Secure Inc., C=US

  + verisignclass1g3ca

    DN: CN=VeriSign Class 1 Public Primary Certification Authority - G3,
           OU="(c) 1999 VeriSign, Inc. - For authorized use only",
           OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

  + verisignclass2g3ca

    DN: CN=VeriSign Class 2 Public Primary Certification Authority - G3,
           OU="(c) 1999 VeriSign, Inc. - For authorized use only",
           OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

  + verisignclass1g2ca

    DN: OU=VeriSign Trust Network,
           OU="(c) 1998 VeriSign, Inc. - For authorized use only",
           OU=Class 1 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US

  + verisignclass1ca

    DN: OU=Class 1 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
Comments
Removed verisignclass2g2ca from the release note as it was restored with JDK-8204923 verisignclass2g2ca DN: C=US, O=VeriSign, Inc., OU=Class 2 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
13-06-2018