DigiCert: Mis-Issuance Rekey certificates

DigiCert reported a misissuance incident involving 1,090 rekeyed certificates that were issued using expired domain validation documents. The issue was discovered during a routine internal review on September 14, 2017, leading to an immediate investigation and a system patch to prevent further misuse of expired documentation. DigiCert has since reverified 1,021 of the affected domains and revoked five certificates that could not be revalidated. The CA is committed to revoking any remaining certificates that do not pass revalidation by the end of the week. The incident has been resolved with all certificates logged to CT and system updates implemented to prevent future occurrences.

1. 2017-09-14 DigiCert discovered the misissuance during a routine internal review.
2. 2017-09-15 DigiCert patched the system to prevent further rekeying with expired validation documents.
3. 2017-10-01 DigiCert revoked five certificates that could not be revalidated.
4. 2018-02-06 DigiCert completed system updates and remediated all certificates.

1. 2017-09-19 DigiCert — DigiCert reported the misissuance and outlined the steps taken to address the issue.
2. 2017-09-21 Community commenter — Inquired about the root cause and communication issues related to the misissuance.
3. 2017-10-04 DigiCert — Confirmed that all certificates have been added to the CT database.
4. 2018-02-06 Fastly representative — Closed the case after confirming all certificates were remediated and system updates were in place.