SECOM: certificate for which “L” and “ST” not set

SECOM Trust Systems CO., LTD. identified a compliance issue involving a certificate that lacked the 'L' and 'ST' fields. The CA discovered the problem during an internal investigation on March 6, 2019, and subsequently contacted the customer to revoke the certificate, which was completed on March 15, 2019. Following this incident, SECOM found an additional seven certificates with similar issues and committed to revoking them by the end of June 2019. The CA has since updated its procedures to ensure compliance with revocation timelines as outlined in the Baseline Requirements.

1. 2016-02-03 Certificate issued without 'L' and 'ST' fields.
2. 2019-03-06 Problem certificate discovered during internal investigation.
3. 2019-03-15 Problem certificate revoked.
4. 2019-06-11 All seven problematic certificates revoked.

1. 2019-04-16 Secom representative — SECOM reported the discovery of a certificate without 'L' and 'ST' and outlined the revocation process.
2. 2019-04-30 Fastly representative — Requested clarification on the timeline for revocation of additional problematic certificates.
3. 2019-06-03 Secom representative — Updated that three out of seven problematic certificates had been revoked.
4. 2019-06-11 Secom representative — Confirmed that all seven problematic certificates had been revoked.
5. 2019-07-12 Secom representative — Informed that the validation manual had been updated to prevent future delays.