SSL.com delayed disclosure of Timestamping CA in CCADB

ASSIGNED SSL.com

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

SSL.com reported that its auditor found a subordinate CA certificate, CN = SSL.com Timestamping Issuing RSA CA 2, that had been created on 2026-06-12 but was not disclosed to CCADB. The incident was identified during a comparison of the CA scope list used for SSL.com’s annual WebTrust audit against CCADB disclosures. SSL.com said the certificate should have been disclosed and that disclosure did not happen on time. The report cites CCADB v2.1 section 3.2, which requires CA owners to disclose subordinate CA certificates within 7 calendar days of issuance and before the CA begins issuing publicly-trusted certificates. SSL.com said it would post a full incident report on or before 2026-09-10.

Model: gpt-5.4-mini Generated: 2026-09-06 11:01 UTC Confidence: 0.97 1 comment

Chronology

2026-06-12 SSL.com Timestamping Issuing RSA CA 2 was created.
2026-08-27 The delayed CCADB disclosure was reported in a preliminary incident report.

Thread Activity

2026-08-27 SSL.com — SSL.com said its auditor found the undisclosed subordinate CA certificate and stated that a full incident report would follow by 2026-09-10.

Participants

SSL.com

External References

Original Bugzilla Case

Similar Local Cases

#2057353 RESOLVED Ca Certificate Compliance Ccadb Disclosure Issue Incident Duplicate Or Superseded Opened 2026-07-23 · Closed 2026-07-28 · 71% similar

DigiCert or Microsoft: Incorrect disclosure of intermediate certificate

AI Summary CA Owner

#2051283 RESOLVED Ccadb Bug Incident Audit Finding Audit Delay Opened 2026-06-29 · Closed 2026-08-08 · 71% similar

ANF AC : Delayed Reporting of 2026 Audit Findings

AI Summary CA Owner

#2066489 ASSIGNED Common Ca Database Ccadb Disclosure Issue Incident Externally Reported Incident Opened 2026-08-25 Still Open · 70% similar

GoDaddy: CCADB Missing Partitioned CRL URL Disclosure

AI Summary CA Owner

#2058363 RESOLVED Common Ca Database Ccadb Disclosure Issue Incident Externally Reported Incident Opened 2026-07-28 · Closed 2026-08-29 · 70% similar

DigiCert: Blank SubCA Owner field in CCADB for cross-certificate

AI Summary CA Owner

#2055449 RESOLVED Ca Certificate Compliance Incident Ccadb Disclosure Issue Policy Document Issue Opened 2026-07-16 · Closed 2026-08-06 · 70% similar

Firmaprofesional: Delayed and inaccurate policy-document disclosures for SIGNE Autoridad de Certificacion - 2020

AI Summary CA Owner

#2049960 ASSIGNED Ccadb Disclosure Issue Incident Externally Reported Incident Opened By Ca Opened 2026-06-24 Still Open · 70% similar

Actalis: Undisclosed Subordinate CA Certificate

AI Summary CA Owner

#2049012 RESOLVED Ccadb Metadata Update Opened By Ca Ccadb Disclosure Issue Policy Document Issue Opened 2026-06-19 · Closed 2026-08-04 · 70% similar

FNMT: Inaccuracy in CRL URL in CCADB

AI Summary CA Owner

#2054450 RESOLVED Ca Certificate Compliance Ccadb Disclosure Issue Incident Externally Reported Incident Opened 2026-07-13 · Closed 2026-09-01 · 69% similar

Firmaprofesional: Chrome Root Program Policy - Incorrect CCADB hierarchy associations

AI Summary CA Owner