← DigiCert cases
Bugzilla #1417771
Ca Documents
Incident
DigiCert: Symantec non-constrained/non-disclosed intermediate CA certificates
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves DigiCert's proactive disclosure of compliance issues related to non-constrained and non-disclosed intermediate CA certificates that were part of the former Symantec infrastructure. The CA identified that there were 279 intermediate CAs that had not been reported in the Common CA Database (CCADB). DigiCert is working to upload these CAs to CCADB and ensure they are properly audited. The resolution involves including these CAs in the upcoming audit report and addressing compliance issues by migrating them to a hosted solution or ensuring they are audited and properly verifying email addresses. The case has been marked as resolved.
Chronology
- DigiCert files a compliance report regarding non-constrained intermediate CAs.
- DigiCert provides a list of intermediate CAs to be included in the audit.
- DigiCert confirms that compliance issues are being addressed through audits and CCADB updates.
Thread Activity
- DigiCert — Filed a compliance report regarding 279 non-constrained TLS-capable issuing CAs.
- DigiCert — Confirmed that all three groups of intermediate CAs will be included in the upcoming audit report.
- Community commenter — Explained the ongoing efforts to ensure all CAs are disclosed and audited as per Mozilla policy.
Participants
DigiCert
Mozilla representative
Fastly representative
Community commenter
External References
Similar Local Cases
DigiCert: Failure to disclose Unconstrained Intermediate within 7 Days
DigiCert / Verizon: Qualified 2019 Audit Statements
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert: Validation Scope Incident
DigiCert: JOI Issue
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
DigiCert: Apple: Non-compliant Common Name Length