← DigiCert cases
Bugzilla #1304895
Ca Certificate Compliance
Certificate Misissuance
DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
In July, TI Trust Technologies Global CA, part of DigiCert, issued a certificate without a subject alternative name (SAN) extension. This issue was identified by Mozilla and prompted outreach to ensure that TI Trust Technologies had processes in place to prevent similar occurrences in the future. The CA confirmed that the issue was due to a bug in their provisioning system, which has since been fixed. The CA has since migrated to a managed infrastructure, and all affected certificates have been addressed. The bug has been resolved with the status 'FIXED'.
Chronology
- TI Trust Technologies Global CA issued a certificate without a SAN extension.
Thread Activity
- Mozilla representative — Reported the no-SAN certificate issue and suggested outreach to the CA.
- Mozilla representative — Requested confirmation from DigiCert regarding TI Trust Technologies' issuance practices.
- Community commenter — Confirmed that the CA addressed the no-SAN certificate issue and remediated it.
- Community commenter — Requested an update on the status of TI Trust Technologies' migration.
- DigiCert — Reported that TI Trust Technologies completed the migration of TLS certificates.
- Community commenter — Confirmed that the CA has been revoked and added to OneCRL.
Participants
Mozilla representative
Community commenter
DigiCert
External References
Similar Local Cases
DigiCert: Certificate Issues Identified on the Mailing List
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
DigiCert / Telecom Italia: Several Problems
DigiCert / Wells Fargo: Invalid DNS names
DigiCert: Verizon mis-issued test certificates
DigiCert: Issuance of Cert with Compromised Key
DigiCert: Incorrect RegNumber-Org Type combination
DigiCert: Org information issue in new validation workflow