Hongkong Post / Certizen: Failure to report misissuance

In August 2018, Hongkong Post revoked a number of misissued certificates but failed to file an incident report regarding this misissuance. The CA became aware of the issue on July 18, 2018, and subsequently identified 18 problematic certificates. The CA took steps to notify subscribers and implemented operational controls to prevent future occurrences. The CA has since updated its Certificate Practice Statement (CPS) to enhance its revocation process and has implemented pre-issuance linting to ensure compliance with standards. The case has been resolved as of December 2019, with all questions answered and remediation completed.

1. 2018-08-01 Hongkong Post revoked misissued certificates.
2. 2019-12-17 Pre-issuance linting feature successfully applied to the CA system.

1. 2019-01-15 Fastly representative — Reported the failure to file an incident report regarding misissued certificates.
2. 2019-01-18 Certizen representative — Provided a timeline of actions taken in response to the misissuance.
3. 2019-12-18 Certizen representative — Updated that the pre-issuance linting feature was successfully applied.
4. 2019-12-24 Fastly representative — Confirmed that all questions have been answered and remediation is complete.