← GlobalSign nv-sa cases
Bugzilla #1651447
Delayed Revocation
GlobalSign: Failure to revoke noncompliant ICA within 7 days
RESOLVED
FIXED
GlobalSign nv-sa
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case addresses GlobalSign's failure to revoke a noncompliant Intermediate Certificate Authority (ICA) within the required 7-day timeframe as mandated by the CA/Browser Forum's Baseline Requirements. The issue was identified internally by GlobalSign, which subsequently opened this bug to document the compliance failure. GlobalSign acknowledged the delay and committed to providing an incident report. The case has since been resolved, with the CA implementing measures to improve its compliance processes and ensure timely revocation in the future.
Chronology
- GlobalSign fails to revoke noncompliant ICA within the required timeframe.
Thread Activity
- GlobalSign nv-sa — Creating this bug to capture GlobalSign not able to revoke all CA affected by a previous incident within the 7 days time frame.
- GlobalSign nv-sa — GlobalSign became aware of the problem during internal discussions and confirmed the inability to meet the revocation timeline.
- Mozilla representative — I will close this, and we can track any additional remediation action in Bug #1649937.
Participants
GlobalSign nv-sa
Community commenter
Mozilla representative
External References
Similar Local Cases
GlobalSign: ICAs in CCADB, without EKU extension are listed in WTCA report but not in WTBR report
GlobalSign: Failure to revoke noncompliant ICA within 7 days
GlobalSign: Untimely revocation of TLS certificate after submission of private key compromise
GlobalSign: Failure to revoke key-compromised certificate within 24 hours
GlobalSign: Failure to revoke 2 noncompliant QWACs within 5 days
Actalis: Failure to revoke within 7 days: OCSP EKU issue
Globalsign: Delayed revocation
Sectigo: Failure to revoke key-compromised certificate within 24 hours