DigiCert: Incomplete disclosure of CRL URLs in CCADB

ASSIGNED DigiCert

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

The bug concerns DigiCert’s disclosure of CRL URLs in the Common CA Database (CCADB). DigiCert states that the URLs disclosed in CCADB are not comprehensive for the CRLs of certain DigiCert CAs. DigiCert cites CCADB Policy Section 6.2, including requirements that the complete set of distinct HTTP URLs be disclosed and that disclosed URLs match exactly as they appear in the certificates issued. DigiCert also notes that the incident disclosure was based on a third-party report. The bug is currently in ASSIGNED status, and no resolution is recorded in the thread provided.

Model: gpt-5.4-nano Generated: 2026-07-16 19:46 UTC Confidence: 0.82 1 comment

Chronology

2026-07-14 DigiCert opened a bug reporting incomplete CRL URL disclosure in CCADB for certain DigiCert CAs.

Thread Activity

2026-07-14 DigiCert — DigiCert submitted a preliminary incident report stating CCADB-disclosed CRL URLs are not comprehensive for certain DigiCert CAs and referenced CCADB Policy Section 6.2 requirements, noting the disclosure was triggered by a third-party report.

Participants

DigiCert

External References

Original Bugzilla Case

Similar Local Cases

#2055250 ASSIGNED Ccadb Disclosure Issue Externally Reported Incident Opened 2026-07-15 Still Open · 73% similar

D-TRUST: Incomplete Disclosure of CRL URLs

AI Summary CA Owner

#2055120 ASSIGNED Ccadb Disclosure Issue Opened By Ca Opened 2026-07-15 Still Open · 69% similar

Chunghwa Telecomm: Incomplete disclosure of CRL URLs in CCADB

AI Summary CA Owner

#2053948 ASSIGNED Self Reported Incident Ccadb Disclosure Issue Opened By Ca Single Ca Owner Opened 2026-07-09 Still Open · 66% similar

IdenTrust: Delayed disclosure of Intermediate CA in CCADB

AI Summary CA Owner

#2055542 UNCONFIRMED Problem Reporting Failure Externally Reported Incident Opened By Ca Opened 2026-07-16 Still Open · 61% similar

DigiCert: Delayed response to problem report related to Bug 2055539

AI Summary CA Owner

#2050850 ASSIGNED Ccadb Disclosure Issue Repository Issue Problem Reporting Failure Opened 2026-06-26 Still Open · 61% similar

Asseco DS / Certum: HTTP 404 returned by CRL Distribution Point URLs for six pre-inclusion Root CAs

AI Summary CA Owner

#2051283 ASSIGNED Ccadb Disclosure Issue Self Reported Incident Remediation Tracking Opened 2026-06-29 Still Open · 60% similar

ANF AC : Delayed Reporting of 2026 Audit Findings

AI Summary CA Owner

#2049012 ASSIGNED Ccadb Disclosure Issue Ccadb Metadata Update Repository Issue Opened 2026-06-19 Still Open · 60% similar

FNMT: Inaccuracy in CRL URL in CCADB

AI Summary CA Owner

#2047866 ASSIGNED Ccadb Disclosure Issue Repository Issue Self Reported Incident Opened 2026-06-16 Still Open · 59% similar

certSIGN: incorrect URL in CCADB

AI Summary CA Owner