DigiCert: Persistent failure to answer questions in a timely manner
This case involves DigiCert's repeated failure to respond to questions on Bugzilla within the mandated 7-day timeframe, as reported by Tim Callan from Sectigo. The issue was identified through a pattern of late responses and missed questions spanning from July 2024 to March 2025. DigiCert acknowledged the problem and provided a preliminary incident report, committing to investigate the cited instances and improve their response processes. They implemented several remediation measures, including an automated tracking system for questions, standardized response templates, and mandatory training for personnel involved in incident response. As of June 2025, DigiCert has completed all action items and requested closure of the bug.
- DigiCert begins missing mandated response deadlines.
- Tim Callan raises concerns about DigiCert's response patterns.
- DigiCert completes remediation measures and requests bug closure.
- Sectigo — DigiCert has a pattern of failing to meet mandated posting deadlines on Bugzilla.
- DigiCert — DigiCert is investigating the list of unanswered questions provided by Tim Callan.
- DigiCert — DigiCert outlines root causes and remediation steps taken to address the incident.
- CCADB representative — Final call for comments on the incident report before closure.