← Sectigo cases
Bugzilla #1548713
Certificate Problem Report
Sectigo: "Default City" in Subject:localityName
RESOLVED
FIXED
Sectigo
AI Summary
Sectigo faced an issue where certificates contained 'Default City' in the localityName field, indicating a failure to validate this information. An incident report was requested, and Sectigo responded by detailing their awareness of the problem, the timeline of their actions, and the steps taken to prevent future occurrences. They confirmed that they ceased issuing certificates with this issue and implemented new automated checks to enhance validation processes. The case was resolved with all questions answered and remediation deemed complete.
Chronology
- Initial report received regarding certificates with 'Default City'.
- Certificates identified and revoked.
- Geofencing check to avoid issuing certificates to embargoed areas went live.
- Sectigo expressed readiness to close the bug as remediation was complete.
Participants
Wayne Thayer
Robin Alden
Ryan Sleevi
External References
Similar Local Cases
Sectigo: EV SSL Certificates with incorrect subject details.
Sectigo: "Some-State" in stateOrProvinceName
Sectigo: Failure to provide a preliminary report within 24 hours.
Sectigo: EV SSL Certificates with incorrect businessCategory
Sectigo: invalid dnsName
Sectigo: Failure to provide a preliminary report within 24 hours
Sectigo: invalid subject:organizationalUnitName on DV certificates
Sectigo: Use of forbidden subjectPublicKeyInfo algorithm