← DigiCert cases
Bugzilla #1945536
CCADB Compliance
DigiCert: Outdated CPS for 13 Roots in CCADB
CLOSED
DigiCert
AI Summary
DigiCert faced an incident where outdated Certificate Policy/Certification Practice Statement (CP/CPS) entries were displayed for 13 root certificates in the CCADB. The issue arose due to a failure to mark older documents as 'Superseded' and unresolved ALV errors that delayed the submission of the updated CP/CPS. Following the incident report, DigiCert updated its internal procedures to ensure timely updates and compliance with CCADB requirements, committing to better oversight and automation in future submissions.
Chronology
- CP/CPS v7.04 published by DigiCert.
- Case 00002121 created to update audits and include CP/CPS v7.04.
- ALV errors identified; case reverted for resolution.
- Sectigo notified DigiCert about outdated CPS entries.
- Case 00002192 approved, disclosing CP/CPS v7.04.
Participants
DigiCert
Sectigo
Mozilla
External References
Similar Local Cases
DigiCert: Late CP/CPS CCADB uploads
DigiCert: Persistent failure to answer questions in a timely manner
DigiCert: Missing audits for Intermediate certificates
DigiCert: Intermediate Cert(s) not disclosed in CCADB
DigiCert: Issues with CCADB entries
DigiCert: Non-audited, non-technically-constrained intermediate certificates
IdenTrust: Inaccurate CRL Details in CCADB
FNMT: Delayed Disclosure of Updated Policy Documents in the CCADB