DigiCert: Verizon mis-issued test certificates

DigiCert reported a compliance issue involving test certificates mis-issued by Verizon's subordinate certificate authority. The issue was discovered during internal testing prompted by a previous disclosure regarding Symantec. DigiCert requested the revocation of the mis-issued certificates, and as of the latest updates, 26 out of 28 certificates have been revoked, with the remaining two expired. Verizon has implemented system patches and training to prevent future occurrences of similar issues. The transition of Verizon's issuing authority to DigiCert is ongoing, with no fixed completion date yet established.

1. 2017-01-30 DigiCert discovered mis-issued test certificates from Verizon.
2. 2017-02-06 DigiCert confirmed that 26 out of 28 mis-issued certificates were revoked.
3. 2017-09-13 DigiCert provided a comprehensive incident response report regarding the mis-issuance.
4. 2017-10-17 DigiCert indicated that the issues related to the mis-issued certificates were resolved.

1. 2017-01-30 Mozilla representative — Reported mis-issued certificates found during testing and requested revocation.
2. 2017-02-06 DigiCert — Confirmed that 26 out of 28 mis-issued certificates have been revoked.
3. 2017-09-13 DigiCert — Provided clarity on the reasons for the mis-issuance and steps taken to prevent recurrence.
4. 2017-10-17 DigiCert — Suggested closing the bug as the issues have been resolved.