Amazon Trust Services: Overdue audit statements for intermediate certificates
This case concerns Amazon Trust Services (ATS) having outdated/overdue audit statements in CCADB for certain intermediate certificates. The issue was triggered by Mozilla CA Program Manager emails indicating that ATS’s audit statements were out of date. ATS acknowledged the issue and stated that it updated CCADB with DigiCert’s latest audit reports for three intermediates operated by DigiCert. ATS also described process changes to ensure audit report updates are handled faster, including reviewing DigiCert’s final audit reports and adding a step to update the CCADB record before the review is closed out. ATS requested the bug be resolved as fixed, and Mozilla indicated it would close the bug on 23-Mar-2022 unless there were further questions. The bug is marked RESOLVED with resolution FIXED.
- Mozilla CA Program Manager emails identified out-of-date audit statements in CCADB for ATS intermediates.
- ATS updated the intermediate records in CCADB with DigiCert’s latest audit information.
- ATS requested the bug be resolved as fixed after remediation.
- Mozilla planned to close the bug on 23-Mar-2022 if no further questions remained.
- Mozilla representative — Opened the bug with details that multiple intermediate certificates had audit period end dates of 09/30/2020.
- DigiCert — Acknowledged the issue and said ATS updated CCADB with DigiCert’s latest audit reports.
- DigiCert — Provided a timeline stating Mozilla emails were received on Jan 4, Feb 1, and Mar 1, 2022, and that ATS updated CCADB on Mar 3, 2022; also described process changes to update audit reports faster.
- DigiCert — Requested the bug be resolved as Fixed if there were no further questions.
- Mozilla representative — Stated an intention to close the bug on Wed., 23-Mar-2022 unless there were any questions or issues.