← DigiCert cases
Bugzilla #1397958
Certificate Misissuance
DigiCert / Terena: Metadata in OU fields
RESOLVED
DigiCert
AI Summary
This case addresses a misissuance issue related to metadata present in the Organizational Unit (OU) fields of certificates issued by DigiCert's sub-CA, Terena. The problem was identified on August 9, 2017, and DigiCert responded promptly, determining that the issue did not violate the Baseline Requirements. However, they implemented measures to prevent metadata in the OU field and committed to validating all OU information prior to issuance. The case has been resolved with the implementation of these safeguards.
Chronology
- Issue reported to mailing list
- DigiCert added OU metadata to a blacklist
- Timeline for resolution provided
Participants
Kathleen Wilson
Jeremy Rowley
External References
Similar Local Cases
DigiCert / Inteso San Paulo: Double dot characters
DigiCert / Verizon: Reserved/Intranet domain name
DigiCert / Justica: Invalid DNS names
DigiCert: Verizon mis-issued test certificates
DigiCert / Swiss Government: CommonName not in SANs
DigiCert / Wells Fargo: Invalid DNS names
DigiCert / Telecom Italia: Several Problems
DigiCert: DigiCert issued cert with CN too long