DigiCert: Intermediate Cert(s) not disclosed in CCADB

RESOLVED FIXED DigiCert

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

DigiCert was found to have one or more intermediate certificates that were not disclosed in the Common CA Database (CCADB), which is a requirement under Mozilla's Root Store Policy. The issue was raised by Kathleen Wilson, highlighting that all certificates capable of issuing new certificates must be audited and publicly disclosed. DigiCert acknowledged the compliance deadline and confirmed that they would work to ensure all relevant certificates were disclosed. As of April 14, 2018, DigiCert was actively collaborating with the affected authorities to bring all certificates into compliance. The bug was resolved with the necessary disclosures made.

Model: gpt-4o-mini Generated: 2026-06-13 11:19 UTC Revised: 2026-06-16 18:53 UTC Confidence: 0.85 14 comments

Chronology

2018-04-05 DigiCert's intermediate certificates were reported as not disclosed in CCADB.
2018-04-14 DigiCert confirmed they were working with authorities to ensure compliance.
2018-06-11 DigiCert announced plans to replace non-compliant certificates.
2018-08-22 DigiCert confirmed that the certificates were no longer in Mozilla's trust scope.

Thread Activity

2018-04-05 Mozilla representative — DigiCert has intermediate certs not disclosed in CCADB.
2018-04-06 DigiCert — Asked about the deadline for uploading existing client cert ICAs.
2018-04-06 Community commenter — Uploaded the two CAs to the CCADB.
2018-04-14 Community commenter — Confirmed DigiCert was working with ECCE/SCEE for compliance.
2018-06-11 DigiCert — Announced plans to replace certificates starting June 29.
2018-08-22 DigiCert — Confirmed that the certificates were no longer in Mozilla trust scope.

Participants

Mozilla representative DigiCert Community commenter Fastly representative Incm representative

External References

Original Bugzilla Case crt.sh www.mozilla.org ccadb.org bugzilla.mozilla.org bugzilla.mozilla.org

Similar Local Cases

#1455150 RESOLVED Ca Documents Audit Finding Opened 2018-04-18 · Closed 2023-02-22 · 93% similar

DigiCert: Missing audits for Intermediate certificates

AI Summary CA Owner

#1539296 RESOLVED Audit Finding Opened 2019-03-26 · Closed 2024-06-30 · 92% similar

DigiCert: KPN Outdated Audit

AI Summary CA Owner

#1417771 RESOLVED Ca Documents Incident Opened 2017-11-16 · Closed 2024-06-30 · 85% similar

DigiCert: Symantec non-constrained/non-disclosed intermediate CA certificates

AI Summary CA Owner

#1583470 RESOLVED Ca Documents Audit Finding Opened 2019-09-24 · Closed 2023-02-22 · 85% similar

Camerfirma: audit gap

AI Summary CA Owner

#1650910 RESOLVED Self Reported Incident Audit Finding Revocation Issue Opened 2020-07-06 · Closed 2023-02-22 · 83% similar

DigiCert: Inconsistent EV audits

AI Summary CA Owner

#1458024 RESOLVED Ca Documents Audit Document Self Assessment Auditor Qualification Opened 2018-04-30 · Closed 2026-07-13 · 83% similar

DigiCert WebTrust Audits

AI Summary CA Owner

#1596931 RESOLVED Ca Documents Policy Document Issue Opened 2019-11-15 · Closed 2024-06-30 · 82% similar

DigiCert: Verizon CPS lacks CPR problem reporting instructions

AI Summary CA Owner

#1626805 RESOLVED Ca Documents Audit Finding Opened 2020-04-01 · Closed 2023-02-22 · 82% similar

FNMT: Minor non-conformities in 2020 audit statement

AI Summary CA Owner