← DigiCert cases
Bugzilla #1814197 · CCADB Compliance
DigiCert: Late CP/CPS CCADB uploads
DigiCert · RESOLVED
AI Summary
DigiCert identified a compliance issue regarding the timely update of their Certificate Policy/Certificate Practice Statement (CP/CPS) records in the CCADB following updates from Apple and Microsoft. The issue was discovered during a review, revealing that updates were not made within the required 30-day timeframe. DigiCert has since implemented a notification process with their subCAs to ensure timely updates in the future.
Chronology
- DigiCert notices outdated CP/CPS records for 22 Subordinate CAs.
- QuoVadis updates 6 Subordinate CAs.
- DigiCert submits a Certificate Problem Report to Sectigo.
- Notification process for CP/CPS updates established.
Participants
Martin Sullivan
Brenda Bernal
B Wilson
External References
Similar Local Cases
DigiCert: Outdated CPS for 13 Roots in CCADB
DigiCert: Issues with CCADB entries
DigiCert: Persistent failure to answer questions in a timely manner
DigiCert: Missing audits for Intermediate certificates
DigiCert: Intermediate Cert(s) not disclosed in CCADB
DigiCert: Non-audited, non-technically-constrained intermediate certificates
Tuntrust: Failure to Respond to April 2023 Survey