SECOM: Intermediate CA Certificates Missing from Audit Reports

SECOM Trust Systems CO., LTD. identified that several intermediate CA certificates were missing from their 2020 WebTrust audit reports. The CA proposed to revoke certain certificates and include others in the upcoming audit. SECOM became aware of the issue on March 17, 2021, and began planning for revocation and audit. They confirmed that all affected certificates would be included in the next WebTrust audit, with revocations scheduled by September 1, 2021. The WebTrust audit report was completed and published in early September 2021, resolving the ALV errors in the Common CA Database (CCADB).

1. 2021-03-17 SECOM became aware of missing intermediate CA certificates.
2. 2021-09-01 Revocation of certain CA certificates was completed.
3. 2021-09-03 WebTrust audit report was submitted.

1. 2021-06-17 Mozilla representative — Ben Wilson noted the missing CA certificates in the audit reports.
2. 2021-06-24 Secom representative — Hisashi Kamo stated that an incident report was being prepared.
3. 2021-07-15 Secom representative — Hisashi Kamo confirmed that all CA certificates would be included in the WebTrust audit.
4. 2021-09-10 Secom representative — Hisashi Kamo reported that the ALV error had been resolved.