← Actalis cases
Bugzilla #1390974
Policy Compliance
Actalis: Non-BR-Compliant Certificate Issuance
RESOLVED
FIXED
Actalis
AI Summary
Actalis faced issues with the issuance of certificates containing invalid DNS names, specifically internal server names, which violated the Baseline Requirements (BRs). The CA became aware of the problem following a report on August 13, 2017, and acknowledged that a certificate should have been revoked by October 2016 but was not due to a human error in their compliance checking tool. After discussions and commitments from the affected customer, ENI, the problematic certificate was revoked on September 2, 2017. Actalis has since implemented a new compliance checking system to prevent future occurrences.
Chronology
- Problem report received from Jonathan Rudenberg.
- Offending certificate revoked.
- New compliance checking system deployed.
Participants
Kathleen Wilson
Adriano Santoni
Jonathan Rudenberg
Ryan Sleevi
External References
Similar Local Cases
Izenpe: Non-BR-Compliant Certificate Issuance
Entrust: Non-BR-Compliant Certificate Issuance
Kamu SM: Non-BR-Compliant Certificate Issuance
GoDaddy: Non-BR-Compliant Certificate Issuance
Actalis: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy
SECOM: Non-BR-Compliant Certificate Issuance
QuoVadis: Non-BR-Compliant Certificate Issuance
Camerfirma: Govern d'Andorra audits