D-Trust: issuing 1024 bit certificates

The reporter observed a recent 1024-bit RSA certificate in a chain issued by D-TRUST. The certificates identified were issued under the D-TRUST Root Class 3 CA 2 2009 and D-TRUST SSL Class 3 CA 1 2009. D-TRUST staff responded that they had found two certificates with this key length requested by one customer. They stated that the two certificates were revoked immediately and that the customer was informed. D-TRUST also noted that the bug had been included within website application updates and that it would implement further mechanisms and additional test resources to avoid similar accidents in the future. The reporter asked whether the bug should be closed as fixed, and later indicated they did not see a recent occurrence and closed the bug for now. The bug is marked RESOLVED with resolution WORKSFORME.

1. 2014-10-01 A 1024-bit RSA certificate was observed in a D-TRUST certificate chain.
2. 2014-10-02 D-TRUST identified two 1024-bit certificates and revoked them immediately.
3. 2014-12-26 The reporter closed the bug for now after not seeing a recent occurrence.

1. 2014-10-01 Roeckx representative — Reported seeing a recent 1024-bit RSA certificate from the D-TRUST chain and provided the subject details.
2. 2014-10-02 D-Trust — Confirmed they found two certificates with this key length requested by one customer, said they were revoked immediately, and stated the customer was informed; also said they would add mechanisms and more testing to prevent future accidents.
3. 2014-10-06 Mozilla representative — Asked whether the bug should be closed as fixed.
4. 2014-12-26 Roeckx representative — Said they didn't see a recent one and closed the bug for now.