← Sectigo cases
Bugzilla #1567060
CCADB Compliance
Sectigo / Web.com: inconsistent disclosure of externally-operated intermediate
RESOLVED
FIXED
Sectigo
AI Summary
This case addresses the inconsistent disclosure of intermediates operated by Sectigo under the same CP/CPS as Web.com. Sectigo acknowledged the issue and updated the CCADB records to align with Web.com's disclosures. The resolution involved clarifying the audit and CP/CPS details for the cross-certificates issued to Web.com. The case was resolved with all questions answered and remediation completed.
Chronology
- Initial report of inconsistent disclosures by Sectigo.
- Sectigo acknowledged the slow response and promised an update.
- Confirmation that all questions have been answered and remediation is complete.
Participants
Andrew Ayer
Robin Alden
W. Thayer
External References
Similar Local Cases
Sectigo: CCADB failed ALV - Ensured Root CA
Sectigo: CCADB failed ALV - Network Solutions Certificate Authority
Sectigo: Inadequate vulnerability scanning and patching
Sectigo: CCADB failed ALV - Network Solutions Certificate Authority
Sectigo: Late CCADB update after CPS update
Camerfirma: audit gap
Cybertrust Japan: three test websites not provided
Telia: Intermediate Cert(s) Not Disclosed in CCADB