Amazon Trust Services: ALV Errors

RESOLVED FIXED Amazon Trust Services

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

Amazon Trust Services reported issues related to Audit Letter Validation (ALV) errors due to two unused intermediate certificates not being included in their audit reports. The CA discovered the problem during a review of CA Communications in January 2020. They acknowledged the oversight and provided a timeline of actions taken, including the deletion of the problematic certificates in December 2015 and subsequent updates to their audit reports. The CA has since completed the revocation of these intermediates and is working on improving their compliance processes. The bug has been resolved with the status 'FIXED'.

Model: gpt-4o-mini Generated: 2026-06-13 15:27 UTC Revised: 2026-06-16 18:04 UTC Confidence: 0.85 14 comments

Chronology

2021-06-26 Amazon Trust Services completed revocation of the intermediates.

Thread Activity

2021-05-31 DigiCert — Amazon Trust Services reported ALV errors due to missing certificates in their audit reports.
2021-06-02 Mm representative — Feedback was provided regarding the completeness of the incident report and compliance expectations.
2021-06-04 DigiCert — Amazon Trust Services acknowledged the feedback and stated they are investigating.
2021-06-26 DigiCert — Amazon Trust Services confirmed the completion of revocation of the intermediates.
2021-07-03 DigiCert — Amazon Trust Services stated they will create an incident report for not revoking in 2015.
2021-07-27 Mozilla representative — The bug was scheduled for closure with hopes for improved future compliance.

Participants

DigiCert Mm representative Community commenter Mozilla representative

External References

Original Bugzilla Case

Similar Local Cases

#1695938 RESOLVED Ca Documents Audit Finding Opened 2021-03-02 · Closed 2024-06-30 · 87% similar

SECOM: FUJIFILM intermediate CA Certificate not listed in audit statement

AI Summary CA Owner

#1650910 RESOLVED Self Reported Incident Audit Finding Revocation Issue Opened 2020-07-06 · Closed 2023-02-22 · 75% similar

DigiCert: Inconsistent EV audits

AI Summary CA Owner

#1713976 RESOLVED Policy Document Issue Opened 2021-06-02 · Closed 2023-02-22 · 70% similar

Amazon Trust Services: CP/CPS does not specify key compromise methods

AI Summary CA Owner

#1713978 RESOLVED Certificate Misissuance Opened 2021-06-02 · Closed 2023-02-22 · 69% similar

Amazon Trust Services: Forbidden Domain Validation Method 3.2.2.4.6

AI Summary CA Owner

#1887753 RESOLVED Certificate Misissuance Audit Finding Opened 2024-03-25 · Closed 2024-07-12 · 68% similar

Entrust: Delay in Updating CPS

AI Summary CA Owner

#1914893 RESOLVED Certificate Misissuance Opened 2024-08-26 · Closed 2024-09-18 · 68% similar

Amazon Trust Services: CRL not DER-encoded

AI Summary CA Owner

#1923279 RESOLVED Audit Finding Opened 2024-10-08 · Closed 2025-03-17 · 67% similar

iTrusChina: lacking 2018 KGC and GAP period audit report

AI Summary CA Owner

#2008803 RESOLVED Self Reported Incident Audit Finding Opened 2026-01-06 · Closed 2026-02-12 · 67% similar

Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #4 - Missing evaluation for third parties

AI Summary CA Owner