DigiCert: Malformed ICA

DigiCert identified a compliance issue during a post-issuance review of a key ceremony, where an issuing CA was created without the required CRL extension. This discovery led to a scan revealing nine additional ICAs with similar errors. DigiCert has ceased issuing new certificates until the key ceremony process is fully automated to prevent human error. They have outlined a timeline of actions taken in response to the incident, including revocations and plans for improved automation in their processes.

1. 2020-07-24 DigiCert discovered a compliance failure during a key ceremony review.
2. 2020-07-29 DigiCert scheduled additional ICAs for revocation.
3. 2020-08-10 DigiCert began implementing automation in their key ceremony process.
4. 2020-12-09 DigiCert completed a public key ceremony using the new automated tool.

1. 2020-07-24 Community commenter — DigiCert reported a compliance failure discovered during a key ceremony.
2. 2020-07-27 DigiCert — Additional checks for the ICA process were discussed.
3. 2020-08-07 DigiCert — Root causes of the incident were identified and discussed.
4. 2020-12-09 Community commenter — DigiCert confirmed the successful completion of a public key ceremony.