Dhimyotis / Certigna: Intermediate Cert(s) not disclosed in CCADB

The bug reports that the Dhimyotis/Certigna CA had one or more intermediate certificates that were not disclosed in the Common CA Database (CCADB). The reporter cited Mozilla’s Root Store Policy requirement that certificates capable of issuing new certificates and chaining to a Mozilla root must be audited and publicly disclosed in the CCADB by the CA. The assigned CA representative stated that the internal intermediate CA that was not disclosed had been added to the CCADB about four days prior and suggested the bug could be closed. A Fastly participant then verified that Dhimyotis no longer had certificates appearing on the referenced report as “undisclosed” and resolved the bug. The bug’s resolution is FIXED and the current status is RESOLVED.

1. 2018-04-05 A report was filed that Dhimyotis/Certigna had undisclosed intermediate certificates in the CCADB.
2. 2018-04-10 The CA representative indicated the missing internal intermediate CA was added to the CCADB.
3. 2018-04-10 A verifier confirmed Dhimyotis no longer appeared as undisclosed and the bug was resolved.

1. 2018-04-05 Community commenter — Reported that Dhimyotis/Certigna had intermediate certificates not disclosed in CCADB and linked Mozilla’s Root Store Policy and CCADB disclosure instructions.
2. 2018-04-10 Community commenter — Said the internal intermediate CA not disclosed in CCADB had been added about four days earlier and that the bug could be closed.
3. 2018-04-10 Community commenter — Verified Dhimyotis no longer had certificates appearing as “undisclosed” on the referenced report and resolved the bug.