Dhimyotis / Certigna: Intermediate CAs missing audits

This case concerns Dhimyotis / Certigna intermediate CA certificates that were not listed in the CA’s audit statements. The issue was triggered by identifying two unconstrained intermediate certificates whose audit coverage was missing from the audit statements. The CA responded that these two authorities were no longer used and audited, and that they had been revoked, with their status updated on the CCADB. The reporter then confirmed the revocation of the certificates and indicated they were marked as “Ready to Add” to OneCRL. The bug was closed as resolved/fixed. The thread references the Mozilla CA audit letter validation guidance for handling ALV failures.

1. 2020-02-11 Bug opened after two unconstrained intermediate CA certificates were found missing from the CA’s audit statements.
2. 2020-03-11 CA reported the two intermediate authorities were no longer used and audited and had been revoked; CCADB status updated.
3. 2020-03-12 Reporter confirmed revocation and that the certificates were marked “Ready to Add” to OneCRL; bug closed as resolved/fixed.

1. 2020-02-11 Community commenter — Reported two unconstrained intermediate certificates not listed in the CA’s audit statements and noted the CA should follow the “When ALV returns FAIL” section of the Mozilla Audit Letter Validation wiki page.
2. 2020-03-11 Community commenter — Stated the two authorities were no longer used and audited, had been revoked, and that their status was updated on the CCADB.
3. 2020-03-12 Community commenter — Confirmed the revocation of the certificates and indicated they were “Ready to Add” to OneCRL, then closed the bug as resolved/fixed.