← DigiCert cases
Bugzilla #1368176
CCADB Compliance
DigiCert: Non-audited, non-technically-constrained intermediate certificates
RESOLVED
DigiCert
AI Summary
This case addresses the status of several intermediate certificates issued by DigiCert that are not audited and lack technical constraints. The certificates in question include Belgium Root CA3, Belgium Root CA2, and others. The CA is currently working on sunsetting these certificates due to minor compliance issues. Audit statements have been received for some CA hierarchies, and updates are pending.
Chronology
- Initial report of non-audited certificates
- Audit statements received for Belgium Root CA hierarchies
- Webtrust seal and audit report shared
- Final acknowledgment of updates
Participants
Kathleen Wilson
Jeremy Rowley
Ben Wilson
Stephane Mans
External References
Similar Local Cases
DigiCert: Intermediate Cert(s) not disclosed in CCADB
DigiCert: Missing audits for Intermediate certificates
Consorci AOC: Qualified audit statements
Amazon Trust Services: Overdue audit statements for intermediate certificates
SECOM: Intermediate CA Certificates Missing from Audit Reports
PKIoverheid: Delayed audit statements for intermediate CAs
SwissSign: Audit Letter Validation failures on intermediate certificates
Telia: Intermediate Cert(s) Not Disclosed in CCADB