← SECOM Trust Systems CO., LTD. cases
Bugzilla #1391064
Self Reported Incident
Incident
Closure Request
SECOM: Non-BR-Compliant Certificate Issuance
RESOLVED
FIXED
SECOM Trust Systems CO., LTD.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves SECOM Trust Systems CO., LTD. disclosing non-compliance issues related to the issuance of certificates that did not meet the CA/Browser Forum's Baseline Requirements. The CA was made aware of the problems through discussions in the mozilla.dev.security.policy forum and this Bugzilla entry. SECOM confirmed it has ceased issuing the problematic certificates and provided a list of affected certificates. They also outlined steps to prevent future occurrences, including implementing technical measures to automate checks that were previously reliant on human verification. The resolution was marked as fixed on October 24, 2017, after the necessary changes were implemented.
Chronology
- Initial report of non-compliance issues discovered by SECOM.
- SECOM confirmed the implementation of technical measures to prevent future issues.
Thread Activity
- Mozilla representative — Outlined the compliance issues and requested a response from SECOM.
- Secom representative — Acknowledged the notice and stated they would contact customers and implement technical measures.
- Secom representative — Informed that the treatment was released today.
- Fastly representative — Marked the issue as resolved, indicating all actions were completed.
Participants
Mozilla representative
Secom representative
Community commenter
Fastly representative
External References
Similar Local Cases
SECOM: Non-BR-Compliant OCSP Responders
SECOM: Undisclosed intermediate certificates
SECOM: certificate for which “OU=-”
SECOM: "Default City" in Subject:localityName
SECOM: Ambiguity on KeyUsage with ECC public key
SECOM: Failure to disclose Unconstrained Intermediate within 7 Days
SECOM: certificate for .test TLD
GlobalSign: Non-BR-Compliant Certificate Issuance -- RSA key smaller than 2048 bits