← eMudhra Technologies Limited cases
Bugzilla #1924492
CA Owner Information
eMudhra emSign PKI Services: Failure To Update CA Owner Information In CCADB
RESOLVED
FIXED
eMudhra Technologies Limited
AI Summary
eMudhra Technologies Limited identified a failure to update the CA owner information in the Common CA Database (CCADB), specifically the email address for Certificate Problem Reporting. This oversight led to revocation requests being misdirected to a general inquiry channel, causing delays in processing. Although no security incidents occurred, the incident highlighted the need for improved synchronization between internal updates and public records. Remedial actions included updating the CCADB, implementing a data verification policy, and establishing quarterly audits to ensure ongoing accuracy.
Chronology
- Researcher submitted a certificate revocation request.
- Internal incident raised to investigate delay.
- External incident reported in Bugzilla.
- Corrective action initiated to update CCADB.
- CCADB updated with correct contact details.
- Formal internal procedure introduced for future updates.
Participants
Naveen Kumar ML
Ben Wilson
External References
Similar Local Cases
Firmaprofesional Audit Documents
DigiCert Point-in-Time Audit Letters - Dec. 2017
Byte Computer: Missing Contact Information in CCADB
Carillon Information Security: Missing Contact Information in CCADB
Visa's 2009 Audit and CP
Swiss BIT (FOITT): Missing Contact Information in CCADB
SSL.com: subCA/Reseller Issues
Echoworx: Missing Contact Information in CCADB