← DigiCert cases
Bugzilla #1566162
Incident
DigiCert: Failure to supervise ABB Subordinate CA
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves DigiCert's failure to adequately supervise the ABB Subordinate CA, which resulted in delays in revoking approximately 500 misissued certificates. The issue was initially reported in a related bug, and despite DigiCert's acknowledgment and commitment to an accelerated replacement plan, progress was slow. Following discussions in the thread, DigiCert outlined a plan to improve oversight and communication regarding subordinate CAs. Ultimately, ABB CA 5 was revoked on August 28, 2019, and the incident has been resolved, although DigiCert continues to monitor the shutdown of other subordinate CAs.
Chronology
- ABB CA 5 has been revoked.
Thread Activity
- Fastly representative — Reported failure to supervise ABB Subordinate CA and requested an incident report.
- DigiCert — Clarified the plan for shutting down non-browser TLS Sub CAs.
- DigiCert — Confirmed that ABB CA 5 has been revoked.
- Fastly representative — Indicated that all questions have been answered and remediation is complete.
Participants
Community commenter
External References
Similar Local Cases
DigiCert: "Some-State" in stateOrProvinceName
DigiCert: Microsoft: Incident report for Microsoft Dynamics incident
DigiCert: Failure to provide a preliminary report within 24 hours.
DigiCert / Verizon: Qualified 2019 Audit Statements
DigiCert: Validation Scope Incident
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
DigiCert: Threat of legal action to stifle Bugzilla discourse