QuoVadis: EV JOI Issue

QuoVadis identified a compliance issue related to the use of abbreviations in the jurisdictionStateOrProvinceName field of their EV certificates. The issue was discovered during a proactive review initiated in response to a related incident involving DigiCert. QuoVadis took immediate action by revoking 413 affected certificates and clarifying their validation procedures. The CA has committed to using only ISO 3166-2 and government-provided references for geographic names moving forward. The remediation process included a manual review of templates and a focus on compliance improvements. The case has been resolved with all questions answered and remediation deemed complete.

1. 2019-09-12 Batch 1 of affected certificates revoked.
2. 2019-09-17 Investigation completed on use of abbreviations in EV JOI.

1. 2019-09-13 DigiCert — Created an attachment detailing the timeline and actions taken regarding the EV JOI issue.
2. 2019-09-17 DigiCert — Certificates revoked and customers informed.
3. 2019-09-18 Fastly representative — All questions have been answered and remediation is complete.
4. 2019-09-24 Community commenter — Expressed concerns about the lack of detail in the response.
5. 2019-10-07 Community commenter — Expressed disappointment regarding the clarity of QuoVadis' operations.
6. 2019-11-02 Fastly representative — Confirmed that all questions have been answered and remediation is complete.