DigiCert: Apple: Non-compliant Serial Numbers

DigiCert reported a compliance issue involving the issuance of certificates with non-compliant serial numbers due to a configuration issue with their CA software. The problem was identified on March 6, 2019, and DigiCert took immediate action, stopping the issuance of non-compliant certificates within 24 hours. They began revoking impacted certificates, with over 500,000 certificates revoked by the end of March 2019. DigiCert provided regular updates on their progress and established a timeline for the complete revocation of all affected certificates, which was expected to be finalized by July 15, 2019.

1. 2019-03-06 DigiCert identified the issuance of non-compliant certificates.
2. 2019-03-07 DigiCert stopped issuing non-compliant certificates.
3. 2019-03-30 DigiCert reported that over 500,000 certificates had been revoked.
4. 2019-07-10 DigiCert confirmed that all valid impacted certificates had been revoked.

1. 2019-03-08 Apple representative — DigiCert disclosed the issuance of non-compliant certificates and outlined their remediation plan.
2. 2019-03-11 Community commenter — Requested details on the impacted certificates and a preliminary incident report.
3. 2019-03-12 Apple representative — Provided a detailed incident report and timeline of actions taken.
4. 2019-07-19 Apple representative — Confirmed that all valid impacted certificates had been revoked.