← Amazon Trust Services cases
Bugzilla #1713978 Certificate Misissuance

Amazon Trust Services: Forbidden Domain Validation Method 3.2.2.4.6

RESOLVED FIXED Amazon Trust Services
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

The case involves Amazon Trust Services' use of a domain validation method (3.2.2.4.6) that is forbidden by the CA/Browser Forum Baseline Requirements. The issue was raised by a commenter who requested clarification on Amazon's compliance with Mozilla's policies. In response, Amazon acknowledged the feedback and committed to updating their Certification Practice Statement (CPS) to clarify their validation methods. By July 30, 2021, Amazon planned to update their CPS to explicitly state which methods are used. The case was resolved when Amazon published updated CP and CPS documents on July 23, 2021, addressing the concerns raised.

Model: gpt-4o-mini Generated: 2026-06-13 15:27 UTC Revised: 2026-06-16 18:05 UTC Confidence: 0.85 14 comments
Chronology
  1. Issue raised regarding the use of a forbidden domain validation method.
  2. Amazon committed to updating their CP and CPS to clarify validation methods.
  3. Amazon published updated CP and CPS documents.
Thread Activity
  1. Mm representative — Raised concerns about Amazon's use of a forbidden domain validation method.
  2. DigiCert — Acknowledged the issue and outlined plans for updating their CP.
  3. DigiCert — Announced the publication of updated CP and CPS documents.
Participants
Mm representative DigiCert Community commenter
Similar Local Cases
#1914893 RESOLVED Certificate Misissuance Opened 2024-08-26 · Closed 2024-09-18 · 95% similar
Amazon Trust Services: CRL not DER-encoded
#1746945 RESOLVED Certificate Misissuance Self Reported Incident Opened 2021-12-20 · Closed 2023-02-22 · 87% similar
Amazon Trust Services: Missing CAA Check For Test Website Certificates
#1713976 RESOLVED Policy Document Issue Opened 2021-06-02 · Closed 2023-02-22 · 79% similar
Amazon Trust Services: CP/CPS does not specify key compromise methods
#1724276 RESOLVED Certificate Misissuance Opened 2021-08-05 · Closed 2023-02-22 · 75% similar
QuoVadis / PKIoverheid: incorrect OCSP response for precertificate
#1716123 RESOLVED Ca Certificate Compliance Certificate Misissuance Self Reported Incident Opened 2021-06-12 · Closed 2024-05-25 · 75% similar
e-commerce monitoring GmbH: CN domain not in SAN
#1398428 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2017-09-09 · Closed 2023-02-22 · 75% similar
Amazon Trust Services: CAA Misissuances
#1712188 RESOLVED Certificate Misissuance Opened 2021-05-20 · Closed 2023-02-22 · 74% similar
Sectigo: test certificates issued from trusted CA
#1705187 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2021-04-14 · Closed 2023-02-22 · 74% similar
KIR S.A.: CN domain not in SAN

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action