Digicert Revokes 50 Extended Verification TLS Certificates

Digicert Certification Authority intends to On July 11, revoke about 50 EV level TLS certificates (Extended Validation). Certificates issued through accredited certification centers that do not appear in audit reports are subject to revocation.
EV-certificates confirm the declared identification parameters and require the certification authority to verify the documents about the ownership of the domain and the physical presence of the resource owner.

Rules, regulating the activities of certification centers, prescribe a mandatory full audit in the event of issuing EV-certificates. Reports published by DigiCert for auditing EV certificates covered only basic infrastructure and did not include accredited CAs established between August 2013 and February 2018 (only general audit reports were published for these CAs, and extended reports for EV certificates were omitted).

To eliminate detected violation DigiCert agreed to revoke EV-certificates not mentioned in the audit reports issued by accredited CAs using intermediate certificates DigiCert Global CA G2, GeoTrust TLS RSA CA G1,
Thawte TLS RSA CA G1,
Secure Site CA,
NCC Group Secure Server CA G2 ΠΈ
TERENA SSL High Assurance CA 3.

Source: opennet.ru

Add a comment