← DigiCert cases
Bugzilla #1649880
Delayed Revocation
QuoVadis: Failure to provide a preliminary report within 24 hours.
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns QuoVadis's failure to provide a preliminary report within the required 24-hour timeframe after receiving a problem report regarding misissued certificates. The issue was raised by a user who reported that QuoVadis did not acknowledge the problem report in a timely manner, leading to a delay in revocation. QuoVadis confirmed the revocation of the certificates after more than five days, which also violated the Baseline Requirements. The CA has since integrated an automated revocation system to improve compliance with reporting timelines. The case has been resolved, and the bug is now closed.
Chronology
- Problem report filed by George regarding misissued certificates.
- QuoVadis failed to revoke the certificates within the required 5 days.
- QuoVadis integrated with the automated revocation system.
Thread Activity
- Fozzie representative — Reported that QuoVadis did not send a preliminary report within 24 hours.
- DigiCert — Provided a timeline of actions taken by QuoVadis in response to the report.
- DigiCert — Requested closure of the bug, stating the matter was resolved.
- DigiCert — Confirmed that the integration with the automated system was complete and requested closure of the bug.
Participants
Fozzie representative
DigiCert
Mozilla representative
External References
Similar Local Cases
QuoVadis: Failure to revoke within 7 days: OCSP EKU issue
QuoVadis: use of Organisationidentifier field in EV (Pre CABF Ballot SC17)
QuoVadis: Failure to provide a preliminary report within 24 hours
QuoVadis: Unconstrained CAs revocation
Disig: Failure to provide a preliminary report within 24 hours.
DigiCert: Failure to revoke key-compromised certificates within 24 hours
DigiCert: Failure to revoke invalid serialNumber EV certificates within 5 days
Entrust: Failure to provide a preliminary report within 24 hours.