Digicert: Delayed Revocation for bug 1894560

DigiCert faced a significant incident involving the delayed revocation of over 10,000 certificates due to incorrect business category assignments. Initially, DigiCert believed that certain circumstances allowed for delayed revocation, citing critical infrastructure and legal restrictions. However, following extensive discussions, it was clarified that there are no acceptable reasons for delayed revocation under Mozilla's policies. DigiCert has since committed to adhering strictly to the Baseline Requirements and has implemented measures to prevent future occurrences.

1. 2024-05-06 Final data on problematic certificates collected.
2. 2024-05-11 Revocation of 7138 certificates completed.
3. 2024-05-29 DigiCert acknowledged that delayed revocation is not acceptable.
4. 2025-01-24 DigiCert committed to not delaying revocation in the future.
5. 2025-04-25 Closure summary posted, confirming all action items completed.