DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate

DigiCert acknowledged a compliance issue regarding the incorrect disclosure of an intermediate certificate that was operated by Microsoft. The issue was identified through a Bugzilla report, leading DigiCert to investigate and confirm the error in their CCADB entry. An incident report was subsequently filed detailing the timeline of events and the steps taken to address the issue, including halting new SubCA signings until the investigation was complete. DigiCert has since updated their processes to prevent similar issues in the future.

1. 2020-06-20 DigiCert acknowledges the error in the CCADB entry for an intermediate certificate.
2. 2020-06-21 DigiCert updates the CCADB entry for the intermediate certificate.
3. 2020-07-06 DigiCert completes a review of prior CAs and identifies additional errors.

1. 2020-06-20 Mm representative — DigiCert has disclosed an intermediate incorrectly operated by Microsoft.
2. 2020-06-21 DigiCert — We are investigating and will come back with an incident report shortly.
3. 2020-06-24 DigiCert — Incident Report filed detailing the compliance issue and corrective actions.
4. 2020-07-06 DigiCert — We found 7 more CAs with similar errors and are updating our processes.