Deutsche Telekom: certificate missing localityName/stateOrProvinceName

The bug reports that a Deutsche Telekom Security GmbH certificate (linked via crt.sh) lacked the subject attributes localityName and stateOrProvinceName, which the reporter said are required by the Baseline Requirements. Mozilla asked the CA to resolve the issues and provide progress updates. The CA stated that it fixed the problem in the affected service so that certificates with organizationName now include either localityName or stateOrProvinceName. The CA also said it would revoke the affected certificate immediately. The bug was resolved with the resolution marked as FIXED.

1. 2016-04-23 A CA certificate was identified as missing required subject locality/state attributes.
2. 2016-04-29 The CA implemented a fix to include localityName or stateOrProvinceName and planned immediate revocation of the affected certificate.

1. 2016-04-23 Roeckx representative — Reported that the certificate linked on crt.sh does not include localityName or stateOrProvinceName in the subject as required by the Baseline Requirements.
2. 2016-04-26 Mozilla representative — Asked Bernd to resolve the issues in the bug and update the bug with progress.
3. 2016-04-29 T-systems representative — Said the CA fixed the affected service so certificates with organizationName include either localityName or stateOrProvinceName, and that it would revoke the certificate immediately.