GlobalSign: 4 Misissued certificates with invalid CN

GlobalSign reported a compliance issue involving four misissued SSL certificates with invalid Common Names (CN). The CA became aware of the problem through its post-issuance compliance checker on May 17, 2019. Following the detection, GlobalSign promptly revoked the certificates and initiated an investigation. The root cause was identified as a missing check for CN/SAN validation in a specific scenario involving a deprecated API. GlobalSign has since implemented code updates to ensure proper validation and is conducting a thorough review of its systems to prevent future occurrences.

1. 2019-05-17 GlobalSign detected misissued certificates through its compliance checker.
2. 2019-05-17 Certificates were revoked and an investigation was initiated.
3. 2019-05-20 GlobalSign identified the root cause related to a missing validation check.
4. 2019-06-01 GlobalSign implemented updates to ensure proper validation checks.

1. 2019-05-17 Community commenter — GlobalSign's compliance checker alerted us to the problem in 4 SSL certificates.
2. 2019-05-23 Community commenter — We rolled out updated code that now properly checks the CN and SAN values.
3. 2019-06-19 Community commenter — We verified that all proper checks are in place for AEG certificate requests.
4. 2019-08-11 Fastly representative — It appears that all questions have been answered and remediation is complete.