← Trustis cases
Bugzilla #1017562 Certificate Misissuance

Trustis: Certificate not version 3

RESOLVED FIXED Trustis
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

This case involves Trustis issuing a version 1 certificate, which does not comply with Mozilla's policy requiring TLS end-entity certificates to contain a subjectAltName extension. The issue was identified by Kurt Roeckx, prompting Kathleen Wilson to request an investigation. Rob Horne from Trustis confirmed that the certificate was issued due to a technical problem related to browser updates affecting the RA portal. Trustis has since revoked the problematic certificate and is conducting a root cause analysis, implementing additional checks to prevent future occurrences. The case is now resolved.

Model: gpt-4o-mini Generated: 2026-06-13 13:55 UTC Revised: 2026-06-16 18:12 UTC Confidence: 0.85 12 comments
Chronology
  1. Trustis issued a version 1 certificate that does not comply with Mozilla's policy.
  2. Trustis revoked the version 1 certificate and committed to issuing a replacement.
  3. Trustis identified the root cause of the issue related to browser compatibility and implemented corrective actions.
Thread Activity
  1. Roeckx representative — Reported seeing a version 1 certificate from Trustis.
  2. Mozilla representative — Requested investigation into the issuance of a version 1 certificate.
  3. Trustis representative — Confirmed the version 1 certificate was revoked and a replacement would be issued.
  4. Trustis representative — Reported findings on the root cause related to browser updates affecting certificate issuance.
Participants
Community commenter
External References
Similar Local Cases
#1353838 RESOLVED Certificate Misissuance Opened 2017-04-05 · Closed 2023-02-22 · 87% similar
Trustis: SHA-1 serverAuth cert issued in November 2016
#1404403 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2017-09-29 · Closed 2023-02-22 · 71% similar
SwissSign: Two certs issued with same issuer and serial number
#1579284 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2019-09-05 · Closed 2023-02-22 · 67% similar
TrustCor: Non-audited intermediate certificates
#1397965 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2017-09-07 · Closed 2023-02-22 · 67% similar
DigiCert / Swiss Government: CommonName not in SANs
#1301545 RESOLVED Certificate Misissuance Opened 2016-09-08 · Closed 2022-11-14 · 66% similar
GlobalSign CloudSSL CA - SHA256 - G3 issued certificate without required extensions
#1677737 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2020-11-17 · Closed 2023-02-22 · 64% similar
SwissSign: duplicate serial number
#1034834 RESOLVED Certificate Misissuance Opened 2014-07-05 · Closed 2022-11-14 · 63% similar
Visa: Issuing 1024 bit certificates
#1691704 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2021-02-09 · Closed 2023-02-22 · 63% similar
SwissSign: Certificate with key length 4098 bit

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action