← DigiCert cases
Bugzilla #1397961
Certificate Misissuance
DigiCert / Justica: Invalid DNS names
RESOLVED
DigiCert
AI Summary
This case involves DigiCert's issuance of a certificate with invalid DNS names for the Portuguese government. The issue was identified on August 12, 2017, leading to the revocation of the certificate on August 15, 2017. The CA acknowledged the misinterpretation of the Baseline Requirements regarding the use of .local domains. Following the incident, steps were taken to ensure compliance and prevent future occurrences.
Chronology
- Problem identified via email
- Certificate revoked
- All problematic certificates expected to be revoked
- Confirmed certificate revoked and expired
Participants
Jeremy Rowley
Kathleen Wilson
Ben Wilson
External References
Similar Local Cases
DigiCert / Inteso San Paulo: Double dot characters
DigiCert / Telecom Italia: Several Problems
DigiCert: Verizon mis-issued test certificates
DigiCert / Swiss Government: CommonName not in SANs
DigiCert: DigiCert issued cert with CN too long
DigiCert / Wells Fargo: Invalid DNS names
DigiCert / Terena: Metadata in OU fields
DigiCert / Siemens: Insufficient Serial Number Entropy