← Microsec Ltd. cases
Bugzilla #1512270
Certificate Misissuance
Microsec: Validity period greater than 825 days
RESOLVED
FIXED
Microsec Ltd.
AI Summary
Microsec Ltd. was notified of misissued certificates with a validity period exceeding the allowed limit of two years. The issue was reported by Alex Gaynor from Mozilla, prompting Microsec to take corrective actions. They issued three certificates with three years validity instead of the permitted two years. Following the notification, Microsec promptly revoked the misissued certificates and issued replacements with the correct validity period. The case has been resolved with no further action required.
Chronology
- Microsec received notification of misissued certificates.
- Customer confirmed successful replacement of misissued certificates.
- Discussion completed; no further action required.
Participants
Wayne Thayer
dr. Sándor SZŐKE
External References
Similar Local Cases
Microsec: Certificate validity period greater than 398 days
Microsec: Misissuance of one OV certificate with Key Usage KeyEncipherment
Microsec: Misissuance an EV TLS certificate without CPSuri
Microsec: Failure to revoke noncompliant ICA within 7 days
Microsec: Non-BR-Compliant Certificate Issuance
SECOM: CrossTrust: OU > 64 characters
GRCA: Misissued certificates - invalid CN, bad validity period, missing extensions
QuoVadis: Certificate containing Debian weak key