GlobalSign: 4 Misissued certificates with invalid CN

GlobalSign identified and resolved an issue involving four misissued SSL certificates that contained invalid Common Names (CN). The problem was detected by their post-issuance compliance checker, which alerted them shortly after the certificates were issued. An investigation revealed that a deprecated API allowed invalid CN values to be used without proper validation. GlobalSign has since revoked the misissued certificates and is implementing changes to ensure that such issues do not recur, including disabling the deprecated API and enhancing their validation checks.

1. 2019-05-17 Certificates issued
2. 2019-05-17 Compliance checker detected misissued certificates
3. 2019-05-17 Investigation started
4. 2019-05-17 Certificates revoked
5. 2019-05-20 Further analysis determined the cause of the issue
6. 2019-05-21 Updated code rolled out to check CN and SAN values
7. 2019-05-31 Responses to follow-up questions provided
8. 2019-08-11 Remediation confirmed complete