← Sectigo cases
Bugzilla #1492006
Certificate Problem Report
Sectigo: Failure to revoke within 24 hours
RESOLVED
FIXED
Sectigo
AI Summary
This case involves Sectigo's failure to revoke certificates for the domain debigare.com within the required 24-hour timeframe after a request was made. The domain owner reported delays exceeding five days for the revocation of certificates signed by Comodo CA, which violated the Baseline Requirements. Although the certificates were eventually revoked, the process highlighted significant issues in Sectigo's handling of revocation requests. The case has been resolved with the implementation of a self-service revocation portal to improve future compliance.
Chronology
- Initial revocation request sent to Comodo CA.
- All remaining certificates revoked.
- Self-service revocation portal released.
Participants
Wayne Thayer
Robin Alden
Guillaume Fortin-Debigaré
External References
Similar Local Cases
Sectigo: "Some-State" in stateOrProvinceName
Sectigo: EV SSL Certificates with incorrect subject details.
Sectigo: "Default City" in Subject:localityName
Sectigo: Failure to properly respond to a report of subscriber key compromise
Sectigo: invalid subject:organizationalUnitName on DV certificates
Sectigo: Missing Intermediate CA Certificate in Audit - D-TRUST CA 2-1 2015
Sectigo: EV SSL Certificates with incorrect businessCategory
Sectigo: Failure to provide timely incident reports