← DigiCert cases
Bugzilla #1684442
Self Reported Incident
DigiCert: SHA-1 intermediate issued after 2016-01-01
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert discovered that it had issued an intermediate CA certificate, DigiCert Timestamp RSA SHA-1 2020 CA1, using SHA-1 after the Mozilla policy sunset date of January 1, 2016. The issue was identified during a compliance review meeting on December 28, 2020, leading to the conclusion that the certificate was mis-issued. DigiCert promptly revoked the certificate on the same day. The CA has since implemented measures to prevent future occurrences, including a hard-block on issuing SHA-1 intermediates and enhancing its compliance checks. The incident has been resolved with the necessary actions taken.
Chronology
- DigiCert Timestamp RSA SHA-1 2020 CA1 intermediate created.
- DigiCert identified compliance issue and revoked the certificate.
Thread Activity
- Sectigo — Reported the issuance of a SHA-1 intermediate CA certificate.
- DigiCert — Submitted an incident report detailing the compliance violation.
- DigiCert — Provided a follow-up incident report with more detailed analysis.
- Mozilla representative — Scheduled the case for closure as the incident has been addressed.
Participants
Community commenter
External References
Similar Local Cases
DigiCert: BR 3.2.5 Validation of Authority Failure for OV Certs
DigiCert: Failure to properly encode Subject name
DigiCert: Mis-Issuance Rekey certificates
DigiCert: Verizon mis-issued test certificates
DigiCert: Issuance of Cert with Compromised Key
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
DigiCert: Malformed ICA
DigiCert: DCV logging issue