← e-commerce monitoring GmbH cases
Bugzilla #1893546
Incident
e-commerce monitoring gmbh: failure to follow incident report requirements
RESOLVED
WONTFIX
e-commerce monitoring GmbH
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
e-commerce monitoring GmbH (GLOBALTRUST) has been reported for failing to adhere to Mozilla's incident reporting requirements, including delayed responses and insufficient incident reports. The CA acknowledged these issues and has committed to addressing them. As a result of ongoing compliance failures, it was announced that GLOBALTRUST will be removed from browser root programs effective June 30, 2024. The CA has ceased the issuance of TLS certificates until full remediation of its processes is achieved. An action plan is being developed to restructure its CA functions and regain compliance with the Browser/OS Root Store Policies.
Chronology
- GLOBALTRUST will be removed from browser root programs.
Thread Activity
- Mm representative — Reported repeated failures by GLOBALTRUST to meet incident reporting requirements.
- e-commerce monitoring GmbH — Confirmed receipt of the report and promised a response.
- e-commerce monitoring GmbH — Acknowledged shortcomings in processes and committed to addressing them.
- e-commerce monitoring GmbH — Announced removal from root programs and cessation of TLS certificate issuance.
Participants
Mm representative
e-commerce monitoring GmbH
Community commenter
External References
Similar Local Cases
e-commerce monitoring GmbH: CRLs with mismatched issuer
e-commerce monitoring GmbH: CN domain not in SAN
Camerfirma: Certificates without CABForum OV Reserved Policy Identifier
Microsoft PKI Services: Sample Site Certificates expired
IdenTrust: Root OCSP Signer certificate mis-issuance
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
PostSignum: Length Subject organizationName
NETLOCK: Full Incident Report was not published within 14 days of notification