Echoworx: Missing Contact Information in CCADB
The bug reports that Echoworx had not updated required CCADB contact information after being notified on 2026-01-23. Specifically, the required CCADB fields “CA Email Alias 1” and “CA Email Alias 2” were empty, which was stated to violate CCADB Policy Section 2 – Contact Information Disclosures. Mozilla requested that Echoworx populate at least one of the required alias fields by submitting an “Add/Update Root Request” case and ensure future updates are made within the policy-mandated 14-day timeframe. Echoworx opened the case and later stated that it is no longer being WebTrust audited and is no longer a CA, and that it can be removed from the program. Mozilla responded that Echoworx Root CA2 remains in the Microsoft Root Store with a Microsoft distrust notbefore date of 15 September 2025, and asked for clarification on what further actions were required. The bug was resolved with resolution “WONTFIX.”
- Echoworx was notified that required CCADB contact information needed updating.
- Mozilla opened the CA Program bug for missing CCADB contact information for Echoworx.
- Echoworx stated it is no longer a CA and requested removal from the program; Mozilla discussed Microsoft distrust timing for Echoworx Root CA2.
- Apple representative — Reported that Echoworx had not updated CCADB contact aliases (“CA Email Alias 1” and “CA Email Alias 2” were empty) after notification on 2026-01-23, violating CCADB Policy Section 2, and requested an Add/Update Root Request with required alias data within 14 days.
- Echoworx representative — Confirmed the case was opened (00002957).
- Mozilla representative — Stated that Echoworx is required to complete the incident reporting process in the CCADB Incident Reporting Guidelines.
- Echoworx representative — Said Echoworx is no longer being WebTrust audited and is no longer a CA, and requested removal from the program.
- Mozilla representative — Noted Echoworx Root CA2 remains in the Microsoft Root Store with a distrust notbefore date of 15 September 2025 and asked for further action guidance.
- Echoworx representative — Asked Mozilla to advise what further actions were required.