← e-tugra cases
Bugzilla #1716843
Audit Related
E-Tugra: Intermediate CA Certificate Missing from Audit Reports
RESOLVED
FIXED
e-tugra
AI Summary
The case involves E-Tugra's intermediate CA certificate, which was not included in their audit reports despite its capability to issue TLS certificates. E-Tugra stated that the CA was only used for end entity certificates for digital signatures and was created in 2013. However, it was highlighted that this CA does not comply with the Baseline Requirements and should be revoked. E-Tugra has committed to not issuing TLS certificates from this CA and has initiated steps for revocation, which was completed on January 19, 2022. The case has been resolved with the CA now included in OneCRL.
Chronology
- Bug reported regarding missing intermediate CA in audit.
- Intermediate CA was revoked.
Participants
Davut Tokgöz
Ben Wilson
Ryan Sleevi
External References
Similar Local Cases
E-Tugra: audit delay because of an environmental disaster/pandemic
PKIoverheid: Overdue audit statements for intermediate certificates
DigiCert WebTrust Audits
Sectigo: Potential audit report delay
IdenTrust - Updated 2016 WebTrust Reports
Documents for Hongkong Post
DigiCert / Verizon: Qualified 2019 Audit Statements
Documents for IdenTrust WebTrust Audit