DigiCert: Missing audits for Intermediate certificates
This case concerns DigiCert's failure to disclose audit information for several intermediate CA certificates as required by Mozilla's root store policy. The issue was triggered by a statement in the November 2017 Mozilla CA Communication, which mandated that all intermediate certificates capable of issuing S/MIME certificates must be audited and disclosed by April 15, 2018. DigiCert was requested to either provide the required audit information or revoke the certificates. The Bechtel CA was revoked on May 1, 2018, and subsequent updates indicated that all certificates listed in this bug have now been disclosed and audited or revoked, leading to the resolution of the case.
- DigiCert fails to disclose audit information for several intermediate CA certificates.
- Bechtel CA revoked.
- All certificates listed in this bug confirmed to be disclosed and audited or revoked.
- Fastly representative — DigiCert has failed to disclose audit information for several intermediate CA certificates as required.
- Community commenter — The Bechtel CA was revoked on 1 May 2018.
- Fastly representative — Confirmed that all of the certificates listed in this bug have been disclosed and audited or revoked.