SSL.com preliminary incident report: EV root test websites used DV certificates instead of EV

ASSIGNED SSL.com

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

SSL.com opened a preliminary incident report after receiving a Certificate Problem Report on 2026-10-12 about its EV root test websites. The report said the valid and expired certificates for the test websites chaining to two EV-enabled roots were DV certificates instead of EV certificates. SSL.com stated that its investigation confirmed the report was accurate. The thread cites the EV Guidelines requirement that CA test websites for each EV root must use valid, revoked, and expired EV certificates. The case remains assigned to SSL.com, and no resolution is recorded in the thread excerpt.

Model: gpt-5.4-mini Generated: 2026-10-20 17:47 UTC Confidence: 0.92 1 comment

Chronology

2026-10-12 A CPR reported that SSL.com’s EV root test websites were using DV certificates instead of EV certificates.
2026-10-14 SSL.com filed a preliminary incident report and confirmed the report was accurate.

Thread Activity

2026-10-14 SSL.com — SSL.com said it received a CPR, investigated, and confirmed that the test websites for two EV-enabled roots used DV certificates instead of EV certificates.

Participants

SSL.com

External References

Original Bugzilla Case

Similar Local Cases

#2077599 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Revocation Issue Opened 2026-10-02 Still Open · 89% similar

SSL.com: Inconsistent published CRL for one ICA

AI Summary CA Owner

#2071491 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Validation Issue Opened 2026-09-11 Still Open · 87% similar

SSL.com: MPIC not performed for specific DCV path

AI Summary CA Owner

#2076197 ASSIGNED Ca Certificate Compliance Self Reported Incident Ccadb Disclosure Issue Incident Opened 2026-09-28 Still Open · 86% similar

SSL.com: CRL URL typo in CRL URL disclosed to CCADB

AI Summary CA Owner

#1962809 RESOLVED Self Reported Incident Revocation Issue Opened 2025-04-25 · Closed 2025-07-28 · 78% similar

SSL.com: Expired certificate for a “Valid” Test Website

AI Summary CA Owner

#1666872 RESOLVED Validation Issue Opened 2020-09-23 · Closed 2023-02-22 · 77% similar

SSL.com: Insufficient validation evidence for the localityName attribute of an OV certificate

AI Summary CA Owner

#1850171 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2023-08-25 · Closed 2023-09-29 · 76% similar

SSL.com: S/MIME certificates issued prior to validation

AI Summary CA Owner

#1790693 RESOLVED Self Reported Incident Revocation Issue Opened 2022-09-13 · Closed 2023-03-24 · 75% similar

SSL.com: Issuance of 1 EV TLS certificate using a Registration/Incorporation Agency not included in our approved public list.

AI Summary CA Owner

#1871113 RESOLVED Ca Certificate Compliance Opened 2023-12-20 · Closed 2024-05-15 · 75% similar

SSL.com: Issuance of one Sponsored-Validated S/MIME certificate with organization information in givenName and surName of the subjectDN

AI Summary CA Owner