NetLock: CN not in SAN

NetLock was reported for issuing seven pre-certificates where the Common Name (CN) did not match the Subject Alternative Name (SAN). The issue was identified by Andrew Ayer on May 17, 2018, leading to an investigation by NetLock. They halted certificate issuance, identified the misconfiguration as the root cause, and communicated with affected users. An incident report was submitted detailing the timeline and corrective actions taken, including the implementation of new validation checks to prevent future occurrences. The bug has been resolved with confirmation that remediation steps were completed.

1. 2018-05-17 NetLock was notified of misissued pre-certificates.
2. 2018-06-11 The problematic certificates were revoked.
3. 2019-09-22 NetLock confirmed implementation of new linting procedures.

1. 2018-05-17 Mm representative — Reported that NetLock issued pre-certificates with mismatched CN and SAN.
2. 2018-05-17 Fastly representative — Requested an incident report from NetLock.
3. 2019-01-05 Netlock — Acknowledged the issue and outlined steps taken to address it.
4. 2019-09-22 Netlock — Provided updates on the implementation of new validation checks.
5. 2019-10-04 Fastly representative — Confirmed that all questions have been answered and remediation is complete.