← DigiCert cases
Bugzilla #1777341
Common Ca Database
Repository Issue
QuoVadis: "unexpired but revoked" constrained CAs unable to be reported in CCADB
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case addresses the issue of 'unexpired but revoked' constrained CA certificates from QuoVadis that could not be reported in the Common CA Database (CCADB) due to size constraints. Stephen Davidson from DigiCert initiated the discussion, highlighting the need for these certificates to be included in CCADB. Kathleen Wilson later confirmed that she would manually add these certificates to the CCADB production. The issue was resolved with the certificates successfully added.
Chronology
- Discussion initiated regarding the inability to report certain revoked CA certificates in CCADB.
- Certificates were manually added to CCADB production.
Thread Activity
- DigiCert — This post is in response to Ben Wilson's email requesting that 'unexpired but revoked CA certificates' be reported in CCADB.
- Mozilla representative — I'll look into adding these manually.
- Mozilla representative — I ended up adding these by hand to CCADB production.
Participants
DigiCert
Mozilla representative
External References
Similar Local Cases
GlobalSign: CRLs reported in CCADB unavailable
DigiCert or Microsoft: Incorrect disclosure of intermediate certificate
Sectigo: Non-existent hostname in CDP and AIA URLs
Add DarkMatter's QuoVadis Subordinate CAs to OneCRL
certSIGN: incorrect URL in CCADB
GlobalSign: misalignment of CRL URL in CCADB with issued certificates
GoDaddy: inconsistent disclosure of externally-operated intermediate
FNMT: Inaccuracy in CRL URL in CCADB