LuxTrust: issuing 1024 bit certificates

This case involves LuxTrust's issuance of 1024-bit certificates, which are in violation of CA/B Forum Baseline Requirements. The issue was initially raised by Kurt Roeckx, who reported seeing recent 1024-bit certificates issued under the LuxTrust root CA. LuxTrust acknowledged the problem and confirmed that the last 1024-bit certificate was issued in July 2011, but subsequent comments revealed that several 1024-bit certificates were issued after this date. LuxTrust committed to replacing the remaining active 1024-bit certificates with 2048-bit certificates by the end of the year. The bug was ultimately resolved as LuxTrust took corrective actions and confirmed that the issue was addressed.

1. 2014-08-30 Initial report of 1024-bit certificates issued by LuxTrust.
2. 2014-09-10 LuxTrust initiated an assessment of the situation regarding the 1024-bit certificates.
3. 2014-09-26 LuxTrust confirmed plans to replace active 1024-bit certificates with 2048-bit certificates.
4. 2014-12-30 LuxTrust confirmed that identified 1024-bit certificates had been revoked.
5. 2015-06-11 LuxTrust confirmed that the bug report could be closed.

1. 2014-08-30 Roeckx representative — Reported seeing recent 1024-bit certificates from LuxTrust.
2. 2014-09-05 Luxtrust representative — Clarified that the 1024-bit certificates were issued under a CA not in the scope of their submission.
3. 2014-09-10 Luxtrust representative — Initiated an in-depth assessment of the situation regarding the 1024-bit certificates.
4. 2014-09-26 Luxtrust representative — Provided outputs of the assessment and confirmed plans to replace 1024-bit certificates.
5. 2015-06-11 Luxtrust representative — Confirmed that the bug report can be closed.