← DigiCert cases
Bugzilla #1397963
Certificate Misissuance
DigiCert / Wells Fargo: Invalid DNS names
RESOLVED
DigiCert
AI Summary
This case involves DigiCert's issuance of certificates with invalid DNS names for Wells Fargo. The issue was identified through a certificate problem report and involved trailing whitespace in domain names. DigiCert took prompt action to revoke the affected certificates and address the OCSP response issues. The case has been resolved, and the issuing CA has been revoked.
Chronology
- Bug created to address invalid DNS names
- DigiCert acknowledged the issues and began remediation
- Discussion on OCSP response issues and corrective actions
- Issuing CA revoked
Participants
Kathleen Wilson
Jeremy Rowley
External References
Similar Local Cases
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert / Verizon: Reserved/Intranet domain name
DigiCert / Inteso San Paulo: Double dot characters
DigiCert / Justica: Invalid DNS names
DigiCert / Swiss Government: CommonName not in SANs
DigiCert / Telecom Italia: Several Problems
DigiCert / Terena: Metadata in OU fields
DigiCert: Verizon mis-issued test certificates