Bug ID: JDK-8314960 Add Certigna Root CA

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 11	JDK 17	JDK 21	JDK 22	JDK 7	JDK 8	Other
11.0.21-oracleFixed	17.0.10-oracleFixed	21.0.1Fixed	22 b13Fixed	7u401Fixed	8u391Fixed	openjdk8u392Fixed

Add the following Certigna root:

Root:  "Certigna Root CA"

Serial number:
cae91b89f155030da3e6416dc4e3a6e1 

Valid from: Tue Oct 01 01:32:27 PDT 2013 until: Sat Oct 01 01:32:27 PDT 2033
Certificate fingerprints:
         SHA1: 2D:0D:52:14:FF:9E:AD:99:24:01:74:20:47:6E:6C:85:27:27:F5:43
         SHA256: D4:8D:3D:23:EE:DB:50:A4:59:E5:51:97:60:1C:27:77:4B:9D:7B:18:C9:4D:5A:05:95:11:A1:02:50:B9:31:68

Valid certificate : https://valid.servicesca.dhimyotis.com/
Revoked certificate : https://revoked.servicesca.dhimyotis.com/

An OCSP responder is only available for end entity certificates, not for Root and intermediate CAs.

For these end entity certificates, OCSP responder can be requested with one of the following CRLs :
http://servicesca.ocsp.certigna.fr
http://servicesca.ocsp.dhimyotis.com

Fix Request (OpenJDK 8u critical): Please approve this backport for OpenJDK 8u392. It adds a new CA cert to the JDKs cacerts file. Parity with Oracle JDK 8u. Tests pass. Risk should be low as it's only adding a new cert. Patch applies clean after JDK-8295894 (also in the approval queue).
06-09-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk8u/pull/49 Date: 2023-09-06 10:27:03 +0000
06-09-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk8u-dev/pull/366 Date: 2023-09-05 09:56:16 +0000
05-09-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk11u/pull/81 Date: 2023-09-02 08:19:24 +0000
02-09-2023
Fix Request (11u): Should get backported for parity with 11.0.21-oracle. Version from 17u works for 11u (clean backport). The 2 tests have passed.
02-09-2023
Fix Request (17u): Should get backported for parity with 17.0.9-oracle. Doesn't apply cleanly. Resolution and review: see https://git.openjdk.org/jdk17u/pull/377. The 2 included tests have passed.
01-09-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk17u/pull/377 Date: 2023-08-31 19:35:39 +0000
31-08-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk17u-dev/pull/1715 Date: 2023-08-31 18:58:27 +0000
31-08-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk21u/pull/107 Date: 2023-08-25 18:20:40 +0000
25-08-2023
Changeset: e9ba8d5a Author: Rajan Halade <rhalade@openjdk.org> Date: 2023-08-25 18:17:27 +0000 URL: https://git.openjdk.org/jdk/commit/e9ba8d5a0e74c7e61f963b9a295662899d0156dd
25-08-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/15425 Date: 2023-08-25 00:39:49 +0000
25-08-2023