← DigiCert cases
Bugzilla #1304895 Ca Certificate Compliance Certificate Misissuance

DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension

RESOLVED FIXED DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

In July, TI Trust Technologies Global CA, part of DigiCert, issued a certificate without a subject alternative name (SAN) extension. This issue was identified by Mozilla and prompted outreach to ensure that TI Trust Technologies had processes in place to prevent similar occurrences in the future. The CA confirmed that the issue was due to a bug in their provisioning system, which has since been fixed. The CA has since migrated to a managed infrastructure, and all affected certificates have been addressed. The bug has been resolved with the status 'FIXED'.

Model: gpt-4o-mini Generated: 2026-06-13 11:02 UTC Revised: 2026-06-16 18:35 UTC Confidence: 0.85 14 comments
Chronology
  1. TI Trust Technologies Global CA issued a certificate without a SAN extension.
Thread Activity
  1. Mozilla representative — Reported the no-SAN certificate issue and suggested outreach to the CA.
  2. Mozilla representative — Requested confirmation from DigiCert regarding TI Trust Technologies' issuance practices.
  3. Community commenter — Confirmed that the CA addressed the no-SAN certificate issue and remediated it.
  4. Community commenter — Requested an update on the status of TI Trust Technologies' migration.
  5. DigiCert — Reported that TI Trust Technologies completed the migration of TLS certificates.
  6. Community commenter — Confirmed that the CA has been revoked and added to OneCRL.
Participants
Mozilla representative Community commenter DigiCert
External References
Similar Local Cases
#1389172 RESOLVED Ca Certificate Compliance Revocation Issue Opened 2017-08-10 · Closed 2023-02-22 · 100% similar
DigiCert: Certificate Issues Identified on the Mailing List
#1397957 RESOLVED Incident Certificate Misissuance Opened 2017-09-07 · Closed 2023-02-22 · 100% similar
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
#1397960 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2017-09-07 · Closed 2023-02-22 · 100% similar
DigiCert / Telecom Italia: Several Problems
#1397963 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2017-09-07 · Closed 2023-02-22 · 100% similar
DigiCert / Wells Fargo: Invalid DNS names
#1335132 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2017-01-30 · Closed 2023-02-22 · 98% similar
DigiCert: Verizon mis-issued test certificates
#1624527 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2020-03-24 · Closed 2023-02-22 · 97% similar
DigiCert: Issuance of Cert with Compromised Key
#1714439 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2021-06-03 · Closed 2023-02-22 · 96% similar
DigiCert: Incorrect RegNumber-Org Type combination
#1794050 RESOLVED Ca Certificate Compliance Certificate Misissuance Revocation Issue Opened 2022-10-06 · Closed 2023-02-22 · 96% similar
DigiCert: Org information issue in new validation workflow

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action