← DigiCert cases
Bugzilla #1397960
Ca Certificate Compliance
Self Reported Incident
DigiCert / Telecom Italia: Several Problems
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves DigiCert's disclosure of several compliance issues related to its subCA, Telecom Italia Trust Systems. The problems included issuing certificates with serial numbers exceeding 20 octets, common names not included in SANs, and invalid DNS names. DigiCert became aware of these issues through various communications in early August 2017. The CA took actions including revocation of affected certificates and transitioning Telecom Italia to a new CA platform. The subCA will be revoked and added to OneCRL, with the revocation date being pushed to accommodate the transition process.
Chronology
- DigiCert separates this bug from another to request an incident report for Telecom Italia.
- DigiCert confirms plans to revoke the subCA and add it to OneCRL.
- The problematic subCA is added to OneCRL.
Thread Activity
- Mozilla representative — This bug has been separated out from Bug #1389172 to request an incident report specific to this subCA.
- Community commenter — DigiCert provided a timeline of actions taken in response to the issues.
- DigiCert — The Sub CA will be revoked and added to OneCRL.
- Community commenter — These have been added to OneCRL.
Participants
Mozilla representative
Community commenter
DigiCert
External References
Similar Local Cases
DigiCert: Issuance of Cert with Compromised Key
DigiCert: Incorrect RegNumber-Org Type combination
DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension
DigiCert: Verizon mis-issued test certificates
DigiCert: Certificate Issues Identified on the Mailing List
DigiCert / Justica: Invalid DNS names
DigiCert / Wells Fargo: Invalid DNS names
DigiCert / Inteso San Paulo: Double dot characters