← DigiCert cases
Bugzilla #1389172
Ca Certificate Compliance
Revocation Issue
DigiCert: Certificate Issues Identified on the Mailing List
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves DigiCert's proactive disclosure of several certificate issues identified by the Mozilla community on the Mozilla dev-sec mailing list. The issues included insufficient serial number entropy and metadata in the OU field of certificates. DigiCert confirmed the revocation of problematic certificates and outlined a plan for addressing the issues, including system patches and a timeline for further remediation. The case has been resolved with DigiCert implementing necessary changes to prevent future occurrences.
Chronology
- Revocation of InfoCert's subCA due to insufficient serial number entropy.
- Planned revocation of Siemens subCA.
Thread Activity
- DigiCert — Reported multiple certificate issues discovered by the Mozilla community.
- DigiCert — Outlined plans for revocation and system updates.
- Community commenter — Confirmed that DigiCert has patched its systems to prevent metadata in the OU field.
Participants
DigiCert
Mozilla representative
Community commenter
External References
Similar Local Cases
DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert / Telecom Italia: Several Problems
DigiCert / Wells Fargo: Invalid DNS names
DigiCert: Verizon mis-issued test certificates
DigiCert: Inconsistent EV audits
DigiCert: Incorrect RegNumber-Org Type combination
DigiCert: Org information issue in new validation workflow