← DigiCert cases
Bugzilla #1551363
Incident
DigiCert: "Some-State" in stateOrProvinceName
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert disclosed a compliance issue regarding certificates issued with 'Some-State' in the stateOrProvinceName field, which violated the Baseline Requirements. The issue was first identified on May 11, 2019, and DigiCert initiated an investigation that led to the revocation of eight certificates. An incident report was submitted detailing the timeline of events, corrective actions taken, and future preventative measures. As of June 21, 2019, DigiCert completed the revocation of affected certificates and implemented additional training and systematic controls to prevent recurrence. The case is now resolved.
Chronology
- DigiCert was informed of the issue regarding 'Some-State' in certificates.
- DigiCert completed the revocation of affected certificates.
Thread Activity
- Fastly representative — Reported the issue regarding 'Some-State' in DigiCert certificates.
- DigiCert — Confirmed work on the incident report.
- DigiCert — Provided an update on ongoing analysis and scans for additional issues.
- DigiCert — Confirmed completion of revocation for impacted certificates.
Participants
Community commenter
External References
Similar Local Cases
DigiCert: Failure to supervise ABB Subordinate CA
DigiCert: Microsoft: Incident report for Microsoft Dynamics incident
DigiCert: Failure to provide a preliminary report within 24 hours.
DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate
DigiCert / Siemens: Insufficient Serial Number Entropy
DigiCert / CTJ: Metadata in OU fields, Reserved IP Address
DigiCert: Apple: Non-compliant Common Name Length
DigiCert: Validation Scope Incident