← Visa cases
Bugzilla #1034834
Certificate Misissuance
Visa: Issuing 1024 bit certificates
RESOLVED
FIXED
Visa
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case addresses the issuance of 1024-bit certificates by Visa's Public Trusted CAs, which is a violation of the CA/Browser Forum Baseline Requirements. The issue was initially reported by Kurt Roeckx, who noted the presence of such certificates in 2015. Visa confirmed that it had replaced the problematic certificate and stated that it no longer issues 1024-bit certificates as of July 2016. All previously issued 1024-bit certificates were revoked, and the case was resolved.
Chronology
- Kurt Roeckx reported the issuance of 1024-bit certificates by Visa.
- Visa confirmed it no longer issues 1024-bit certificates.
- Visa confirmed that all previously issued 1024-bit certificates were revoked.
Thread Activity
- Roeckx representative — Reported recent 1024-bit certificates generated by Visa.
- Visa — Confirmed the problematic certificate was replaced and would be revoked.
- Visa — Stated that Visa no longer issues 1024-bit certificates.
- Visa — Confirmed that previously issued 1024-bit certificates were revoked.
- Mozilla representative — Noted that the bug is ready to be closed.
Participants
Roeckx representative
Visa
Mozilla representative
Rossde representative
External References
Similar Local Cases
VISA: Misissuance detected by PKIMetal
D-TRUST: Non-BR-Compliant Certificate Issuance
Izenpe: EV certificate with various issues
StartCom: mis-issuance of certs with unvalidated domain names and bogus field values
SHA-1 issuance by DocuSign root
GoDaddy: New GoDaddy incorrect issuance bug appears to be regression of 2010 issue
GoDaddy: Non-BR-Compliant Certificate Issuance
D-Trust: issuing 1024 bit certificates