← Google Trust Services LLC cases
Bugzilla #1667844
Certificate Problem Report
Google Trust Services: Certificates not disclosed in CCADB
RESOLVED
FIXED
Google Trust Services LLC
AI Summary
Google Trust Services LLC was found to have two certificates that were not disclosed in the CCADB, which is a requirement for certificates capable of issuing new certificates. The issue arose when GTS attempted to update the CCADB but encountered permission errors due to the certificates being root certificates. Mozilla's team intervened, adding the certificates as subordinate CAs in the CCADB and clarifying the need for GTS to file a root inclusion request. The case highlights the need for clearer documentation regarding the handling of such scenarios in the future.
Chronology
- Initial report of undisclosed certificates
- Further clarifications and policy discussions
- Additional incident report shared
- Bug closure anticipated
Participants
Kathleen Wilson
Ryan Hurst
Rob
B Wilson
A Warner
Corey Bonnell
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Google Trust Services: incorrect SCT in certificate
Izenpe: Certificates not disclosed in CCADB
Google Trust Services: Incorrect revocation data temporarily served for GTS Y3 & Y4
SK ID Solutions: Incorrect OCSP Delegated Responder Certificate
Add DarkMatter's QuoVadis Subordinate CAs to OneCRL
Google Trust Services: invalid CRL reason code
Google Trust Services: Failure to send preliminary report to subscriber within 24h
Google Trust Services: Failure to provide preliminary report within 24h