← GlobalSign nv-sa cases
Bugzilla #1353833
Certificate Problem Report
GlobalSign: Incapsula issued a certificate for non-existing domain (testslsslfeb20.me)
RESOLVED
GlobalSign nv-sa
AI Summary
This case addresses a certificate issued by GlobalSign for a domain that was no longer under the control of its subscriber. The issue was reported in the Mozilla security policy forum, highlighting concerns about the vetting process for domain ownership. GlobalSign acknowledged the problem and is reviewing their procedures to ensure compliance with updated standards for certificate issuance.
Chronology
- Case reported in Mozilla forum
- Response provided regarding incident
- Further details on domain validation shared
Participants
Kathleen Wilson
Douglas Beattie
Gervase Markham
External References
Similar Local Cases
GlobalSign: Non-BR-Compliant Certificate Issuance -- RSA key smaller than 2048 bits
Bug in GlobalSign Certificate Centre not populating EKUs in 68 SSL certificates
GlobalSign: Non-BR-Compliant Certificate Issuance -- double-dots in dnsName
GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields
Visa: Non-BR-Compliant Certificate Issuance
SECOM: Non-BR-Compliant OCSP Responders
Camerfirma: Startcom are issuing by proxy using Camerfirma
GlobalSign: IP in dnsName