DigiCert / Inteso San Paulo: Double dot characters

This case involves DigiCert's sub-CA, Intesa San Paolo, which issued certificates containing double dot characters due to a typing error. The issue was first reported on July 17, 2017, leading to the replacement and revocation of the problematic certificates shortly thereafter. DigiCert confirmed that as of September 11, 2017, Intesa San Paolo ceased issuing new SSL certificates. The CA is working on implementing measures to prevent such errors in the future. The bug has been resolved with the certificates added to OneCRL.

1. 2017-07-17 Problem reported regarding double dot characters in certificates.
2. 2017-09-11 Intesa San Paolo stopped issuing new SSL certificates.
3. 2018-01-16 Revocation of problematic certificates scheduled.
4. 2018-02-05 Certificates added to OneCRL.

1. 2017-09-08 Mozilla representative — This bug has been separated out from Bug #1389172 to request an incident report specific to this subCA.
2. 2017-09-15 Community commenter — DigiCert provided a timeline of actions taken in response to the issue.
3. 2017-09-18 Community commenter — Intesa San Paolo confirmed they stopped issuing certificates with the problem.
4. 2017-12-12 DigiCert — DigiCert confirmed they are moving to a hosted solution to prevent future errors.
5. 2018-02-05 Fastly representative — The three subordinate CAs have been added to OneCRL, resolving this bug.