DocuSign France - Internal names certificates under a technically-constrained subordinate CA

RESOLVED DocuSign (OpenTrust/Keynectis)

AI Summary

This case involved a subordinate CA under DocuSign that failed to revoke non-compliant internal name certificates as required by CABF BR. After an audit, it was found that several certificates remained valid despite a prior agreement to revoke them. The CA subsequently revoked the offending certificates and made necessary technical changes to comply with the policy.

Model: gpt-4o-mini Generated: 2026-06-13 14:09 UTC Confidence: 0.95

Chronology

2016-11-30 Initial report of non-compliance and request for revocation.
2016-12-01 Two of the three problematic certificates were revoked.
2016-12-06 Technical changes made and new certificates generated.
2016-12-13 Case confirmed as resolved.

Participants

Erwann Abalea Kathleen Wilson

External References

Original Bugzilla Case crt.sh crt.sh crt.sh crt.sh crt.sh

Related Bugzilla IDs Mentioned

#1029147

Similar Local Cases

#1398247 RESOLVED Certificate Problem Report Opened 2017-09-08 · Closed 2023-02-22 · 64% similar

DocuSign/Keynectis: Non-BR-Compliant OCSP Responders

AI Summary CA Owner

#1390994 RESOLVED Certificate Problem Report Opened 2017-08-16 · Closed 2023-02-22 · 64% similar

DocuSign/Keynectis: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1579284 RESOLVED Certificate Problem Report Opened 2019-09-05 · Closed 2023-02-22 · 47% similar

TrustCor: Non-audited intermediate certificates

AI Summary CA Owner

#1304089 RESOLVED Certificate Problem Report Opened 2016-09-20 · Closed 2022-11-14 · 46% similar

Bug in GlobalSign Certificate Centre not populating EKUs in 68 SSL certificates

AI Summary CA Owner

#1268225 RESOLVED Certificate Problem Report Opened 2016-04-27 · Closed 2022-11-14 · 46% similar

entrust: Invalid Teletext strings

AI Summary CA Owner

#1267332 RESOLVED Certificate Problem Report Opened 2016-04-25 · Closed 2022-11-14 · 46% similar

Hongkong Post e-Cert CA 1 - 10 issuing certificates without subject alternative name extension

AI Summary CA Owner

#1267049 RESOLVED Certificate Problem Report Opened 2016-04-24 · Closed 2023-02-22 · 46% similar

Izenpe: EV certificate with various issues

AI Summary CA Owner

#1266942 RESOLVED Certificate Problem Report Opened 2016-04-23 · Closed 2022-11-14 · 46% similar

StartCom: IV without localityName or stateOrProvinceName

AI Summary CA Owner