Certinomis: Cross-signing of StartCom intermediate certs, and delay in reporting it in CCADB

This case addresses the cross-signing of StartCom intermediate certificates by Certinomis and the significant delay in reporting this action in the Common CA Database (CCADB). Certinomis disclosed the certificates 111 days after issuance, which raised compliance concerns regarding the Baseline Requirements. The incident prompted discussions about accountability for misissued certificates and led to the decision to revoke the cross-signed intermediates. The case has been resolved with updates to the CCADB reflecting the revocation status.

1. 2017-08-02 Certinomis disclosed two cross-signed ICAs for StartCom in CCADB.
2. 2017-10-20 Revocation status updated in CCADB.