Kamu SM: "Some-State" in stateOrProvinceName

Kamu Sertifikasyon Merkezi (Kamu SM) disclosed a compliance issue involving two certificates that incorrectly included 'Some-State' in the stateOrProvinceName field, which was not validated according to the Baseline Requirements. The CA became aware of the issue through a notification on mozilla.dev.security.policy and confirmed that only these two certificates were affected. They have since revoked the problematic certificates and are implementing improvements to their ARMA system to prevent similar issues in the future, including adding controls for the state and locality fields. The remediation has been completed and all questions from the incident report have been addressed.

1. 2019-05-13 Kamu SM became aware of the issue via a notification.
2. 2019-05-17 Kamu SM completed the revocation of the two problematic certificates.
3. 2019-06-28 Kamu SM added controls to the ARMA program for the state and locality fields.

1. 2019-05-14 Fastly representative — Reported the issue regarding the 'Some-State' value in the certificates.
2. 2019-05-14 Community commenter — Provided a timeline of actions taken in response to the issue.
3. 2019-05-17 Community commenter — Confirmed the revocation of the two problematic certificates.
4. 2019-06-28 Community commenter — Announced the completion of remediation controls in the ARMA program.
5. 2019-07-01 Fastly representative — Noted that all questions have been answered and remediation is complete.