DocuSign/Keynectis: Undisclosed Intermediate certificate

The bug was opened because DocuSign/Keynectis allegedly failed to disclose an intermediate certificate as required by Mozilla policy section 5.3. The reporter provided a crt.sh link for the intermediate certificate and requested that an incident report be submitted in the bug. The reporter later marked the issue as resolved, stating that Docusign/Keynectis will cease to be a member of the Mozilla program in July as a result of bug 1465629. The bug’s resolution is listed as WONTFIX. No further remediation steps or incident report contents are described in the provided thread comments.

1. 2018-10-09 A report was filed alleging DocuSign/Keynectis did not disclose a specific intermediate certificate required by Mozilla policy.
2. 2019-01-04 The issue was marked resolved due to DocuSign/Keynectis ceasing membership in the Mozilla program in July (per bug 1465629).

1. 2018-10-09 Fastly representative — Reported that DocuSign failed to disclose an intermediate certificate per Mozilla policy section 5.3, provided a crt.sh disclosure link, and requested an incident report.
2. 2019-01-04 Fastly representative — Noted the bug was being resolved because Docusign/Keynectis would cease to be a member of the Mozilla program in July due to bug 1465629.