[Add Issuer]: Aretiico TLS Root CA G1 - STAGING

[adareti]

Mozilla Bugzilla Root Inclusion URL

No response

CA CP/CPS Website URL

https://www.aretiico.com/pki-repository

CT Logs

• Oak (production)
• Sapling (testing)

Issuer Certificate

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

CT Policy

• We are subscribed to the Certificate Transparency Policy Google Group

[mcpherrinm]

Hello. Can you briefly explain what this root is and why it should be trusted by Sapling?

[adareti]

Hi, thanks for getting back. We are a new CA based in the UK, recently gone through our first WebTrust audit and preparing to make a root inclusion request to CCADB with the long-term aim of being allowed to issue trusted TLS certificates.

The root submitted here is from our staging PKI and in content is similar to the production root CA, but with a STAGING prefix in the CN:
C=GB, O=Aretiico Group PLC, CN=STAGING - Aretiico TLS Root CA G1

We have tested locally in Development with Trillian. It would be a good next step for us to try our CT implementation in Staging with externally run CT logs.

[mcpherrinm]

Ok, thank you. We will process your request soon.