← Actalis cases
Bugzilla #2049960
Ccadb Disclosure Issue
Externally Reported Incident
Actalis: Undisclosed Subordinate CA Certificate
UNCONFIRMED
Actalis
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The bug is a preliminary incident report stating that Actalis was notified that a subordinate CA certificate chaining to the Actalis Authentication Root CA appears not to be disclosed in CCADB. The report says an investigation has been initiated to determine the cause of the missing disclosure and whether additional certificates may be affected. The incident disclosure source is described as “Third Party Reported.” The bug references CCADB Policy v 2.1, Section 3.2 (Subordinate CA Certificates). No further actions, findings, or remediation steps are included in the thread provided. The bug is currently marked UNCONFIRMED.
Chronology
- Actalis was notified that a subordinate CA certificate chaining to its Authentication Root CA appears not to be disclosed in CCADB.
Thread Activity
- marco.menonna@staff.aruba.it — Filed a preliminary incident report stating the subordinate CA certificate disclosure appears missing in CCADB, with an investigation initiated and noting the disclosure source as third-party reported.
Participants
marco.menonna@staff.aruba.it
External References
Similar Local Cases
CFCA: OCSP Service return unauthorized responses
GoDaddy: Precertificates incorrectly logged to DigiCert SCT Logs
please remove Wells Fargo from your listing of root CA's
Asseco DS / Certum: Incorrect localityName
D-Trust: CRL URL Disclosure
Actalis: CRL with duplicate serial number in revokedCertificates
certSIGN: incorrect URL in CCADB
Sectigo: Inaccuracy of CCADB-Disclosed URL for eIDAS CP/CPS