← DigiCert cases
Bugzilla #1515788
Self Reported Incident
DigiCert: Underscores - CVS Pharmacy
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert disclosed an incident involving the issuance of certificates containing underscores for CVS Pharmacy. The CA identified the issue and communicated a plan to revoke the affected certificates. The revocation was initially planned for completion by April 30, 2019, but was expedited, and all remaining underscore certificates were revoked by February 8, 2019. The incident was discussed extensively in the thread, with various stakeholders seeking clarification on timelines and risk assessments related to the certificate replacements.
Chronology
- All remaining underscore certificates were revoked.
Thread Activity
- DigiCert — Confirmed that an incident occurred and provided accurate details of affected certificates.
- DigiCert — All remaining underscore certificates were revoked as of today.
- Community commenter — Confirmed the timely resolution of the incident and closed the issue.
Participants
DigiCert
Community commenter
Fastly representative
External References
Similar Local Cases
DigiCert: improper use of domain validation method
DigiCert: Internal Domain Name cert mis-issuance
DigiCert: Underscores - Verizon
DigiCert: Verizon: "Default City" in Subject:localityName
DigiCert: Failure to properly encode Subject name
DigiCert: Issuance of Cert with Compromised Key
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
DigiCert: Inconsistent EV audits