← Government of Hong Kong (SAR), Hongkong Post, Certizen cases
Bugzilla #1267332
Certificate Problem Report
Hongkong Post e-Cert CA 1 - 10 issuing certificates without subject alternative name extension
RESOLVED
Government of Hong Kong (SAR), Hongkong Post, Certizen
AI Summary
The Hongkong Post e-Cert CA 1 - 10 was found to be issuing certificates that lacked the required subject alternative name (SAN) extension, which is a violation of best practices. Although the CA ceased issuing SSL certificates using SHA-1 as of January 1, 2016, issues persisted with the certificates being issued. The case was resolved after the problematic certificates were added to OneCRL, ensuring compliance with the CA/Browser Forum's Baseline Requirements.
Chronology
- Initial report of missing SAN extension
- Discussion on adding certificates to OneCRL
- Case closed as resolved/fixed
Participants
Dana Keeler
Man Ho
Kathleen Wilson
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
DigiCert: ECCE 001 issuing certificates without subject alternative name extension
Hongkong Post: TLS certificates with basicConstraints not marked as critical
Hongkong Post: TLS certificates with Certificate Policies extension that does not assert http scheme
Hongkong Post: Subject CN converted to Unicode representation incident
Hongkong Post: Certificates with invalid embedded SCT signature
Hongkong Post: Delayed response to CPR
GlobalSign CloudSSL CA - SHA256 - G3 issued certificate without required extensions
GoDaddy: improperly encoded certificate issued by Go Daddy Secure Certification Authority