← Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) cases
Bugzilla #1475563
Certificate Misissuance
GDCA: Misissuance of certificates with IP address
RESOLVED
INVALID
Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA))
AI Summary
This case involves a report regarding the misissuance of certificates for IP addresses by Global Digital Cybersecurity Authority Co., Ltd. (GDCA). The complainant argued that GDCA's validation process for issuing these certificates did not meet the necessary authorization standards. GDCA responded by stating that they followed the Baseline Requirements for IP address validation and have since switched to a manual validation process for better compliance. Ultimately, the case was resolved as invalid due to a lack of evidence supporting the misissuance claim.
Chronology
- Initial report of misissuance by user.
- Request for clarification from CA Program.
- GDCA defends its issuance process.
- Conclusion drawn that the report was a false alarm.
Participants
wwwww818
Wayne Thayer
Xiu Lei
External References
Similar Local Cases
KIR S.A.: Certificates issued with multiple BR violations
GDCA: Misissuance of certificates with small RSA keys
Firmaprofesional: Undisclosed Intermediate certificate
GRCA: Misissued certificates - invalid CN, bad validity period, missing extensions
SECOM: TSA Certs Issued from Root
QuoVadis: Non-BR-Compliant OCSP Responder
DigiCert: Underscores - Intuit
DigiCert: "Some-State" in stateOrProvinceName