← SSL.com cases
Bugzilla #1832570
CA Owner Information
SSL.com: subCA/Reseller Issues
RESOLVED
FIXED
SSL.com
AI Summary
The case addresses compliance issues related to SSL.com's management of subordinate CAs, specifically the relationship with e-Tugra, a reseller. SSL.com clarified that e-Tugra operates as a reseller under their control, ensuring compliance with SSL.com's policies. The discussions highlighted the responsibilities of SSL.com in overseeing its resellers and the need for improved communication and guidance. SSL.com committed to creating public guidance for resellers and revising agreements to strengthen security practices. The case is now resolved with ongoing commitments to enhance compliance and security measures.
Chronology
- Initial report on subCA issues related to e-Tugra.
- SSL.com committed to creating public guidance for resellers.
- Reseller Guidance article published.
- Final update on commitments and white paper progress.
Participants
Chris Clements
secauditor@ssl.com
External References
Similar Local Cases
SSL.com - Request for access to CCADB API
Disclosure of new GoDaddy Code Signing Subordinate CAs
eMudhra emSign PKI Services: Failure To Update CA Owner Information In CCADB
Documents for 'Comsign CA' intermediate certificates
Documents for Staat Der Nederlanden (PKIoverheid) intermediate certificate
GRCA publicly disclosed subordinate CA certificates
ACCV publicly disclosed subordinate CA certificates
Documents for DigiCert Intermediate Certificates