← GlobalSign nv-sa cases
Bugzilla #1390997
Certificate Problem Report
GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields
RESOLVED
FIXED
GlobalSign nv-sa
AI Summary
GlobalSign faced issues with certificates that contained metadata-only subject fields, which are not compliant with the Baseline Requirements. The CA was required to provide a detailed response regarding the identification of these problems, confirmation of corrective actions, and a list of affected certificates. GlobalSign implemented checks to prevent the issuance of such certificates and initiated revocations for those identified. The situation was resolved with the deployment of a fix and the revocation of the problematic certificates.
Chronology
- Initial report of non-compliance issues.
- Fix implemented and certificates revoked.
Participants
Kathleen Wilson
Linus Hallberg
Ryan Sleevi
Douglas Beattie
Jonathan
Others
External References
Similar Local Cases
GlobalSign: Non-BR-Compliant Certificate Issuance -- RSA key smaller than 2048 bits
GlobalSign: Non-BR-Compliant Certificate Issuance -- double-dots in dnsName
GlobalSign: ICAs in CCADB, without EKU extension are listed in WTCA report but not in WTBR report
Bug in GlobalSign Certificate Centre not populating EKUs in 68 SSL certificates
GlobalSign: Invalid Common Names in Globalsign Certificates
GlobalSign: IP in dnsName
GlobalSign: Incapsula issued a certificate for non-existing domain (testslsslfeb20.me)
IdenTrust: Non-BR-Compliant Certificate Issuance