← Microsoft Corporation cases
Bugzilla #1693932
Policy Compliance
Microsoft PKI Services: Policy Documentation, Failure to update Domain Validation Method
RESOLVED
FIXED
Microsoft Corporation
AI Summary
Microsoft PKI Services identified an issue with their Certification Practices Statement (CPS) regarding the documentation of domain validation methods. They failed to clearly indicate that certain methods had been deprecated. The issue was discovered on February 10, 2021, during a review process. Microsoft confirmed that they did not use the deprecated methods and have since updated their CPS to reflect current practices. The updated CPS was posted on March 4, 2021, and aims to improve clarity regarding the methods used for domain validation.
Chronology
- Issue regarding CPS documentation discovered.
- New version of CPS finalized for review.
- Updated CPS posted to repository.
Participants
John Mason
B. Wilson
Ryan Sleevi
External References
Similar Local Cases
Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period
Microsoft PKI Services: Failure to disclose Unconstrained Intermediate within 7 Days
Microsoft PKI Services: Failure to disclose Revocation of Intermediate CAs within 7 Days
Amazon Trust Services: Forbidden Domain Validation Method 3.2.2.4.6
Microsoft PKI Services: Failure to modify policy documents within 365 days
SECOM: CP/CPS does not clearly specify domain validation methods
Sectigo: Missing Changelog in CPS
Microsoft PKI Services: Firewall log data retention