DigiCert / Justica: Invalid DNS names

This case involves DigiCert's subCA, Justiça, which issued a certificate with an invalid DNS name (.local). The issue was first reported on August 12, 2017, leading to a request for revocation on August 14, 2017, and the certificate was revoked by August 15, 2017. Justiça acknowledged their misunderstanding of the Baseline Requirements regarding the use of .local domains and has since ceased issuing such certificates. They are in the process of replacing all internal certificates and expect to complete this by October 13, 2017. The case has been resolved with the certificate being revoked and expired.

1. 2017-08-12 Issue reported regarding invalid DNS names used by Justiça.
2. 2017-08-15 Certificate with invalid DNS name revoked.

1. 2017-09-07 Mozilla representative — This bug has been separated out to request an incident report specific to this subCA.
2. 2017-09-09 Community commenter — Provided a timeline of actions taken in response to the incident.
3. 2017-10-12 Community commenter — Justiça responded about their misunderstanding of the Baseline Requirements.
4. 2018-06-25 Community commenter — Confirmed that the certificate in question is revoked and expired.