DigiCert: Underscores - Intuit

This case concerns DigiCert certificates containing underscore characters that browsers raised as an issue via CA/Browser Forum discussions. DigiCert said it ceased issuance of underscore characters on October 1, 2018 and notified customers that browsers were raising concerns about underscores. DigiCert later described that CAB Forum discussions led to a belief that the certificates would require revocation, and that customers reported difficulty meeting the revocation timeline. DigiCert requested an extension of the revocation deadline for 18 certificates to April 30, 2019 due to tax season impact, and later confirmed the incident and that the planned extension applied to the remaining certificates. DigiCert stated that all remaining underscore certificates for the customer were revoked as of April 30, 2019. The bug is marked RESOLVED with resolution FIXED.

1. 2018-09-05 Browsers raised an issue about underscore characters via the CA/Browser Forum.
2. 2018-10-01 DigiCert ceased issuance of underscore characters.
3. 2018-11-09 CAB Forum voting ended, with DigiCert stating this was when it first knew there was a requirement to revoke the certificates.
4. 2019-01-18 DigiCert confirmed an incident occurred and stated the planned revocation extension to April 30, 2019.
5. 2019-04-30 DigiCert reported that all remaining underscore certificates for the customer were revoked.

1. 2019-01-12 Fastly representative — Asked Brenda to confirm whether 18 certificates would be revoked on 26-January-2019.
2. 2019-01-12 DigiCert — Requested extending revocation to April 30, 2019 for the 18 certificates due to tax season impact.
3. 2019-01-13 Fastly representative — Asked why the certificates could not be replaced before tax season and what the 26-Jan date referenced.
4. 2019-01-14 DigiCert — Said to disregard the 26-Jan date and explained the customer’s code freeze and change management policy during tax season.
5. 2019-01-17 Community commenter — Asked whether an incident occurred and whether the affected-certificate details were accurate.
6. 2019-01-18 DigiCert — Confirmed an incident occurred, said details were accurate to the best of DigiCert’s knowledge, and stated the planned extension to revoke remaining certificates was April 30, 2019.
7. 2019-05-01 DigiCert — Reported that all remaining underscore certificates for the customer had been revoked as of April 30, 2019.