DigiCert CCADB disclosure dispute over cross-certificate intermediate attribution

RESOLVED INVALID INVALID DigiCert

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

This case is about a CCADB disclosure dispute involving a DigiCert cross-certificate for a Microsoft-operated subordinate CA. The reporter said DigiCert had disclosed an intermediate certificate under its own CP/CPS even though the same key and subject also appeared in a Microsoft-disclosed certificate, and later pointed out that the Subordinate CA Owner field was blank. DigiCert said it investigated, concluded the disclosures were accurate and compliant, and asked for the report to be closed as invalid. DigiCert also said the cross-certificates were revoked, were not used to issue end-entity certificates, and would be included in the next DigiCert WebTrust audit. DigiCert then said the blank Subordinate CA Owner issue was a different matter and opened Bug 2058363 for it. CCADB staff subsequently marked this bug resolved INVALID because of the separate bug.

Model: gpt-5.4-mini Generated: 2026-07-26 06:23 UTC Revised: 2026-08-02 09:01 UTC Confidence: 0.96 6 comments

Chronology

2026-07-23 A DigiCert cross-certificate and a Microsoft certificate were identified as sharing the same key and subject.
2026-07-25 DigiCert said the cross-certificates were revoked and would be included in the next DigiCert WebTrust audit.
2026-07-28 CCADB staff marked the bug resolved INVALID after a separate bug was opened for the blank Subordinate CA Owner issue.

Thread Activity

2026-07-23 Mm representative — Reported that DigiCert and Microsoft had both disclosed an intermediate certificate for the same key and subject.
2026-07-24 DigiCert — Said DigiCert was investigating and would file a preliminary report as required by CCADB policy.
2026-07-25 DigiCert — Said the disclosures were accurate and compliant, requested closure as invalid, and explained DigiCert's view of the cross-certificate lifecycle and audit treatment.
2026-07-25 Mm representative — Pointed out that the Subordinate CA Owner field was blank and cited CCADB policy as making the disclosure non-compliant.
2026-07-28 DigiCert — Said the blank-field issue was different from the original subject and opened Bug 2058363 for it.
2026-07-28 CCADB representative — Marked this bug resolved INVALID because Bug 2058363 exists for the new issue.

Participants

Mm representative DigiCert CCADB representative

External References

Original Bugzilla Case api.certspotter.com api.certspotter.com crt.sh crt.sh crt.sh crt.sh crt.sh crt.sh

Related Bugzilla IDs Mentioned

#2058363

Similar Local Cases

#2058363 RESOLVED Common Ca Database Ccadb Disclosure Issue Incident Externally Reported Incident Opened 2026-07-28 · Closed 2026-08-29 · 100% similar

DigiCert: Blank SubCA Owner field in CCADB for cross-certificate

AI Summary CA Owner

#2055047 RESOLVED Common Ca Database Ccadb Disclosure Issue Incident Self Reported Incident Opened 2026-07-14 · Closed 2026-08-17 · 97% similar

DigiCert: Incomplete disclosure of CRL URLs in CCADB

AI Summary CA Owner

#2054450 RESOLVED Ca Certificate Compliance Ccadb Disclosure Issue Incident Externally Reported Incident Opened 2026-07-13 · Closed 2026-09-01 · 79% similar

Firmaprofesional: Chrome Root Program Policy - Incorrect CCADB hierarchy associations

AI Summary CA Owner

#2047866 RESOLVED Ccadb Metadata Update Ccadb Disclosure Issue Remediation Tracking Opened By Ca Opened 2026-06-16 · Closed 2026-07-21 · 79% similar

certSIGN: incorrect URL in CCADB

AI Summary CA Owner

#2007216 ASSIGNED Ca Certificate Compliance Incident Ccadb Disclosure Issue Problem Reporting Failure Opened 2025-12-20 Still Open · 78% similar

GoDaddy: CRL Disclosure in CCADB Mismatch with Issued Certificates

AI Summary CA Owner

#2055120 RESOLVED Ca Certificate Compliance Incident Ccadb Disclosure Issue Policy Document Issue Opened 2026-07-15 · Closed 2026-08-21 · 77% similar

Chunghwa Telecom: Incomplete disclosure of CRL URLs in CCADB

AI Summary CA Owner

#2055444 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Audit Delay Opened 2026-07-16 Still Open · 76% similar

Firmaprofesional: Delayed publication of 2026 Audit Attestation Letters

AI Summary CA Owner

#2015567 RESOLVED Ccadb Metadata Update Incident Ccadb Disclosure Issue Information Request Opened 2026-02-09 · Closed 2026-05-15 · 76% similar

Government of Saudi Arabia, NIC (SDAIA): Missing Contact Information in CCADB

AI Summary CA Owner