SDAIA missing required CCADB contact email aliases

This case concerns SDAIA’s failure to keep required CCADB contact information current. The bug was opened by Apple after SDAIA had not updated the CCADB record following a notification on 2026-01-23, and the required fields “CA Email Alias 1” and “CA Email Alias 2” were empty. SDAIA acknowledged the issue, investigated why the notification had not been acted on, and later reported that it populated a non-personal contact email alias on 2026-02-10. SDAIA also said it updated internal review activities and later consolidated two CCADB accounts into one on 2026-04-13. The report closure summary states that all action items were completed and closure was requested, and CCADB issued a final call for comments before closing the report.

1. 2017-12-21 The SDAIA/NCDC CA Owner record was created in CCADB without the required non-personal contact email aliases.
2. 2026-01-23 SDAIA was notified that its CCADB contact information needed updating.
3. 2026-02-10 SDAIA populated CA Email Alias 1 in CCADB.
4. 2026-04-13 The two CCADB accounts for the former NCDC PKI hierarchy and Saudi National SSL PKI hierarchy were consolidated into one account.
5. 2026-05-07 SDAIA submitted a report closure summary requesting closure of the incident report.

1. 2026-02-09 Apple representative — Apple reported that SDAIA had not updated required CCADB contact information and asked it to populate at least one required email alias.
2. 2026-02-10 Sdaia representative — SDAIA acknowledged the discrepancy, said it had started an investigation, and committed to taking the requested action.
3. 2026-02-10 Mozilla representative — Mozilla stated that SDAIA was required to complete the incident reporting process under the CCADB Incident Reporting Guidelines.
4. 2026-02-11 Sdaia representative — SDAIA filed a full incident report describing the missing contact aliases, the timeline, and the fact that the issue did not directly affect certificates.
5. 2026-02-18 Sdaia representative — SDAIA said the non-personal contact alias had been populated and that immediate remediation and preventive actions were complete, while account consolidation remained in progress.
6. 2026-03-19 Apple representative — Apple confirmed the CCADB update fixed the initial problem and asked for overdue action-item and closure updates.
7. 2026-03-26 Sdaia representative — SDAIA posted an updated action-items table showing the alias update and internal review updates as complete and account consolidation as ongoing.
8. 2026-04-16 Sdaia representative — SDAIA said the account consolidation had been completed on 2026-04-13 and that minor follow-up adjustments were being discussed with CCADB.
9. 2026-05-07 Sdaia representative — SDAIA submitted a report closure summary stating that all action items were completed and requesting closure.
10. 2026-05-07 CCADB representative — CCADB issued a final call for comments or questions and said the report would be closed if none were raised.