Microsec: Non-BR-Compliant Certificate Issuance

Microsec Ltd. disclosed multiple non-compliant certificate issuance incidents, including invalid dnsNames and improper key usage settings. The CA became aware of these issues through reports from external auditors and the Mozilla community. In response, Microsec confirmed the revocation of the problematic certificates and outlined steps to prevent future occurrences, including the implementation of automated checks. The CA committed to replacing all non-compliant certificates by the end of November 2017. The case has been resolved with all misissued certificates revoked.

1. 2017-08-08 Microsec received a Problem Report regarding invalid dnsNames.
2. 2017-08-16 Microsec revoked a certificate with improper key usage.
3. 2017-11-30 Microsec confirmed the revocation of all misissued certificates.

1. 2017-08-16 Mozilla representative — Microsec was informed of compliance failures and required to respond.
2. 2017-08-17 Microsec representative — Microsec began addressing the reported problems and outlined their remediation steps.
3. 2017-09-07 Mozilla representative — Gerv noted that the use of unallowed key usage is a violation of standards.
4. 2017-10-11 Mozilla representative — Gerv confirmed acceptance of Microsec's plan to replace non-compliant certificates.
5. 2017-11-30 Microsec representative — Microsec reported the successful revocation of all misissued certificates.