← DigiCert cases
Bugzilla #1424305
Ca Security Vulnerability
Incident
DigiCert: Microsoft: Incident report for Microsoft Dynamics incident
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves a security incident related to a certificate issued by a subordinate CA operated by Microsoft and signed by DigiCert. The incident was triggered by a failure in the CA's problem reporting mechanism and a delay in revocation actions following a key compromise. DigiCert was required to provide an incident report to Mozilla, detailing the timeline of events and actions taken. The report confirmed that the certificate was revoked on December 4, 2017, after the compromise was validated. The incident has been resolved, and DigiCert has implemented measures to improve compliance and response mechanisms.
Chronology
- Certificate was revoked following validation of a key compromise.
Thread Activity
- Fastly representative — Requested DigiCert to file a standard incident report.
- Mozilla representative — Confirmed that DigiCert is responsible for providing the incident report.
- DigiCert — Provided a summary of the incident and confirmed that all actions have been completed.
- Fastly representative — Marked the case as resolved after all actions were completed.
Participants
Community commenter
External References
Similar Local Cases
DigiCert: "Some-State" in stateOrProvinceName
DigiCert: Failure to supervise ABB Subordinate CA
DigiCert: Failure to provide a preliminary report within 24 hours.
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert / Verizon: Qualified 2019 Audit Statements
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
DigiCert: 4 CRLs unavailable or not responding