SECOM: Incorrect and missing EV TLS test websites in CCADB
SECOM Trust Systems reported that a third-party community member filed a Certificate Problem Report about EV TLS test websites disclosed in CCADB for its EV-enabled roots. SECOM said its initial review found that the disclosed valid, revoked, and expired test websites for `SECOM TLS ECC Root CA 2024` were serving OV TLS certificates instead of EV TLS certificates. The company also said it needed to review whether the EV TLS test websites for additional roots and cross-certificate chains were correctly disclosed in CCADB. SECOM stated that the issue concerns the selection, configuration, and CCADB disclosure of EV TLS test websites, not certificate issuance profiles. It said the affected CCADB records had not yet been corrected and that replacement EV test websites had not yet been fully deployed and externally verified. SECOM planned to replace the affected test website information, add any missing cross-certificate test websites, and verify the certificate policy identifiers, status, and certification paths. On 2026-10-20, SECOM said it was still preparing the required EV TLS test web pages and continuing its investigation, with a Full Incident Report due no later than 2026-10-27.
- A third party reported that CCADB-disclosed EV TLS test websites for SECOM’s EV-enabled roots were not serving EV TLS certificates.
- SECOM determined the reported condition was a compliance incident and began investigating the scope of incorrect or missing EV TLS test website disclosures.
- SECOM said it was preparing the required EV TLS test web pages and continuing its investigation, with a Full Incident Report due by 2026-10-27.
- Ml representative — SECOM opened a preliminary incident report describing incorrect and missing EV TLS test websites in CCADB and said it would provide a full report within 14 days.
- Ml representative — SECOM posted a status update saying it was still preparing the required EV TLS test web pages and would post the Full Incident Report no later than 2026-10-27.