GlobalSign: SPKI lacks explicit NULL parameter

GlobalSign identified a compliance issue involving eight unrevoked SSL certificates that lacked the required NULL parameter, violating RFC 3279. Upon notification, GlobalSign promptly revoked the affected certificates and began investigating the root cause. The issue stemmed from an encoding error in their CA platform, which did not properly include the NULL parameter. GlobalSign has since implemented a zlint check to prevent future occurrences and has updated their backend software to address the issue. The incident has been resolved, and no further certificates have been issued without the NULL parameter since the incident was reported.

1. 2019-05-21 Received notification of problematic certificates
2. 2019-05-22 Revoked the certificates
3. 2019-06-16 Released updated zlint with new NULL parameter check
4. 2019-07-18 Patched system with updated version of EJBCA