← e-tugra cases
Bugzilla #1716843
Incident
E-Tugra: Intermediate CA Certificate Missing from Audit Reports
RESOLVED
FIXED
e-tugra
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
E-Tugra disclosed a compliance issue regarding the omission of the intermediate CA certificate 'E-Tuğra Nitelikli Elektronik Sertifika Hizmet Sağlayıcısı v2' from their audit reports. The CA acknowledged that this intermediate CA was capable of issuing TLS certificates, which raised concerns about its compliance with Mozilla's policies and the CA/Browser Forum Baseline Requirements. E-Tugra committed to including this CA in future audits and has initiated a revocation plan for the certificate, which was ultimately revoked on January 19, 2022. The CA has also been added to Mozilla's OneCRL to mitigate risks associated with its previous compliance failures.
Chronology
- The intermediate CA was revoked.
Thread Activity
- Mozilla representative — E-Tugra's audit report does not list the intermediate CA certificate.
- E-Tugra — E-Tugra confirmed the CA is used for end entity certificates and will include it in future audits.
- Community commenter — Concerns were raised about E-Tugra's compliance with the Baseline Requirements.
- E-Tugra — E-Tugra outlined steps to revoke the intermediate CA and ensure compliance.
- E-Tugra — The intermediate CA was revoked.
Participants
Mozilla representative
E-Tugra
Community commenter
External References
Similar Local Cases
E-Tugra: Forbidden Domain Validation Method 3.2.2.4.6
E-Tugra: Failure to Respond to May 2022 Survey
Sectigo: invalid subject:organizationalUnitName on DV certificates
Actalis: Issuance of intermediates after 2020-08-20 that do not comply with Mozilla Policy and the Baseline Requirements
GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31
Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
KIR S.A.: DV certificates with locality name, organization name and stateOrProvinceName