← DigiCert cases
Bugzilla #1651828
Delayed Revocation
DigiCert: Delay of revocation for EV audit inconsistency incident
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert reported a delay in revocation of approximately 35,000 certificates due to inconsistencies in their EV audit process. The CA filed this bug to disclose the situation and outline their plan for revocation, which was complicated by the COVID-19 pandemic. DigiCert committed to revoking most certificates by July 30, 2020, with updates provided throughout the process. The CA faced operational challenges and customer requests for extended timelines, which they argued were exceptional circumstances. The final revocation list was submitted, and the CA's actions were monitored for compliance with Mozilla's policies.
Chronology
- DigiCert filed a bug regarding delays in revocation due to EV audit inconsistencies.
- DigiCert completed the revocation of the affected certificates.
Thread Activity
- DigiCert — DigiCert filed a bug to report a delay in revocation due to EV audit inconsistencies.
- Community commenter — Expressed concerns about compliance issues and the need for DigiCert to demonstrate exceptional circumstances.
- Mozilla representative — Outlined expectations for DigiCert's delayed revocation plan.
- DigiCert — Confirmed the completion of revocation for the affected certificates.
Participants
DigiCert
Community commenter
Mozilla representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
DigiCert: Underscores - Discover
DigiCert: Underscores - Canadian Imperial Bank of Commerce
DigiCert: Underscores - Ericsson
DigiCert: Underscores - Citi
DigiCert: Failure to revoke key-compromised certificates within 24 hours
DigiCert: Failure to revoke key-compromised certificate
DigiCert: delayed publication of revocation information
DigiCert: Failure to revoke within 7 days: OCSP EKU issue