← DigiCert cases
Bugzilla #1436173
Technical Compliance
DigiCert: SCEE / Justica: Non-BR-Compliant Certificate Issuance
RESOLVED
DigiCert
AI Summary
This case addresses non-compliance issues related to certificates issued by the SCEE subordinate CA operated by Justiça, which were found to violate Mozilla's policies. DigiCert was alerted to these issues through a previous bug report and has since worked on remediation efforts. The case culminated in the revocation of several cross-certificates to ensure compliance and maintain trust in Mozilla products.
Chronology
- Bug filed regarding non-compliance
- Portuguese Root CA revoked the CA certificate issued to Justiça
- Revocation of four EC Raiz Estado cross-certificates completed
Participants
Wayne Thayer
Ben Wilson
Steve Medin
External References
Similar Local Cases
Consorci AOC: Non-BR-Compliant OCSP Responders
Sectigo: Late termination of privileged access to Certificate Systems
Entrust: Non-BR-Compliant OCSP Responder
DocuSign/Keynectis: Non-Compliant Technically Constrained Intermediates
Sectigo: Reseller ZeroSSL and Private Key Generation
Firmaprofesional: Non-BR-Compliant OCSP Responders
Visa: Non-BR-Compliant OCSP Responders
Amazon Trust Services: Missing CAA Check For Test Website Certificates