← DigiCert cases
Bugzilla #1573937
Incident
DigiCert / Verizon: Qualified 2019 Audit Statements
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves DigiCert's management of Verizon's compliance with audit requirements following qualified audit statements received in 2019. The issue was triggered by Verizon's failure to meet audit deadlines and the subsequent need for remediation. DigiCert outlined a timeline for remediation, including revocation of certain CAs and a commitment from Verizon to complete a Point-in-Time audit. The case was resolved with the successful revocation of Verizon's CAs by January 2020, and DigiCert confirmed that all audit findings were addressed.
Chronology
- Bug opened to track Verizon's audit compliance and remediation efforts.
- Verizon's CAs were revoked.
Thread Activity
- Mozilla representative — Verizon received qualified audit statements and this bug is to track closure of qualifications.
- DigiCert — DigiCert will post a timeline of actions for remediation.
- DigiCert — Verizon committed to remediating issues by September 19, 2019.
- DigiCert — The CAs for Verizon have been revoked.
Participants
Mozilla representative
DigiCert
Community commenter
Fastly representative
External References
Similar Local Cases
DigiCert: Validation Scope Incident
DigiCert: Failure to disclose Unconstrained Intermediate within 7 Days
DigiCert: JOI Issue
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
DigiCert: Symantec non-constrained/non-disclosed intermediate CA certificates
DigiCert: Failure to provide a preliminary report within 24 hours.