Microsec: ALV Failures

RESOLVED FIXED Microsec Ltd.

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

This case involves Microsec Ltd. addressing discrepancies identified by Mozilla's Audit Letter Validation (ALV) tool related to their CA certificates. The issues arose from the need for all subordinate CA certificates to be included in audit letters as part of compliance checks. Microsec reported multiple reissues of their root and subordinate CA certificates over the years, maintaining validity for earlier versions to ensure long-term signature validation. Following an investigation, Microsec provided a new attestation letter that resolved the ALV issues. The bug was marked as resolved after confirming that there were no remaining ALV failures in the Common CA Database (CCADB).

Model: gpt-4o-mini Generated: 2026-06-13 21:11 UTC Revised: 2026-06-16 19:13 UTC Confidence: 0.85 11 comments

Chronology

2020-03-29 Microsec Ltd. reported ALV discrepancies to Mozilla.
2020-05-29 Microsec received a new Attestation Letter including all versions of their root certificate.
2020-06-05 CCADB was updated, confirming no ALV failures.

Thread Activity

2020-03-29 Fastly representative — Requested a full incident report and update on the audit report.
2020-05-25 Microsec representative — Informed about an open ALV issue and pending attestation letter.
2020-06-22 Microsec representative — Provided the incident report link as previously agreed.

Participants

Community commenter

External References

Original Bugzilla Case www.tuvit.de groups.google.com

Similar Local Cases

#1451953 RESOLVED Ccadb Metadata Update Opened 2018-04-05 · Closed 2024-05-09 · 60% similar

Telia: Intermediate Cert(s) Not Disclosed in CCADB

AI Summary CA Owner

#1956681 RESOLVED Ccadb Metadata Update Policy Document Issue Opened 2025-03-27 · Closed 2025-05-08 · 59% similar

Entrust: Cross-certified CA CP/CPS not updated in CCADB

AI Summary CA Owner

#1924492 RESOLVED Ccadb Metadata Update Opened 2024-10-14 · Closed 2025-02-14 · 59% similar

eMudhra emSign PKI Services: Failure To Update CA Owner Information In CCADB

AI Summary CA Owner

#1941853 RESOLVED Ccadb Metadata Update Opened 2025-01-15 · 58% similar

Entrust root has SECOM CPS in AllCertificateRecordsCSVFormatv2

AI Summary CA Owner

#2012934 RESOLVED Ccadb Metadata Update Repository Issue Opened 2026-01-28 · Closed 2026-02-26 · 58% similar

Telia: Inccorrect CRL URL on a Root CA record in CCADB

AI Summary CA Owner

#2015567 RESOLVED Ccadb Metadata Update Incident Ccadb Disclosure Issue Information Request Opened 2026-02-09 · Closed 2026-05-15 · 58% similar

Government of Saudi Arabia, NIC (SDAIA): Missing Contact Information in CCADB

AI Summary CA Owner

#1818833 RESOLVED Ccadb Metadata Update Opened 2023-02-24 · Closed 2023-03-20 · 58% similar

IdenTrust: Inaccurate CRL Details in CCADB

AI Summary CA Owner

#2031164 RESOLVED Ca Certificate Compliance Ccadb Metadata Update Incident Opened 2026-04-12 · Closed 2026-05-29 · 58% similar

Google Trust Services: Incomplete CRL Distribution Point URLs in CCADB for GTS Roots

AI Summary CA Owner