← DigiCert cases
Bugzilla #1368176
CCADB Compliance
DigiCert: Non-audited, non-technically-constrained intermediate certificates
RESOLVED
DigiCert
AI Summary
This case addresses the status of several intermediate certificates issued by DigiCert that are not audited and lack technical constraints. The certificates in question include Belgium Root CA3, Belgium Root CA2, and others. The CA is currently working on sunsetting these certificates due to minor compliance issues. Audit statements have been received for some CA hierarchies, and updates are pending.
Chronology
- Initial report of non-audited certificates
- Audit statements received for Belgium Root CA hierarchies
- Webtrust seal and audit report shared
- Final acknowledgment of updates
Participants
Kathleen Wilson
Jeremy Rowley
Ben Wilson
Stephane Mans
External References
Similar Local Cases
DigiCert: Intermediate Cert(s) not disclosed in CCADB
DigiCert: Missing audits for Intermediate certificates
DigiCert: Outdated CPS for 13 Roots in CCADB
DigiCert: Late CP/CPS CCADB uploads
DigiCert: Issues with CCADB entries
DigiCert: Persistent failure to answer questions in a timely manner
DigiCert: Non-BR-Compliant OCSP Responders
DigiCert / Telecom Italia: Several Problems