← e-commerce monitoring GmbH cases
Bugzilla #1897457
Policy Compliance
e-commerce monitoring gmbh: failure to maintain links to historic CP/CPS versions
RESOLVED
WONTFIX
e-commerce monitoring GmbH
AI Summary
e-commerce monitoring GmbH (ECM) faced issues with broken links to historical Certificate Policies (CP) and Certification Practice Statements (CPS) in their documents. This failure to maintain proper links was identified as a violation of Mozilla's requirements, impacting relying parties' ability to access past versions. Although ECM has rectified the broken links on their website, they acknowledged the shortcomings in their processes and are committed to restructuring their Certificate Authority functions. As a result of these issues, ECM will be removed from the Root Programs effective June 30, 2024, but certificates issued prior to this date will remain valid.
Chronology
- Last correct CP version issued with all links intact.
- ECM to be removed from Root Programs.
Participants
Daniel Zens
External References
Similar Local Cases
SECOM: CP/CPS does not clearly specify domain validation methods
Microsoft PKI Services: Failure to modify policy documents within 365 days
Sectigo / SSL.com: Late disclosure of updated SSL.com CP/CPS to CCADB
TWCA: Policy OID not set to indicate the assurance level to the issued certs
Sectigo: Missing Changelog in CPS
Sectigo: Failure to revoke certificate with previously-compromised key within 24 hours
SECOM: Non-BR-Compliant Certificate Issuance
Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period