DigiCert: Validation Scope Incident

DigiCert reported a validation scope incident where a feature allowed improper issuance of certificates due to a mismatch in domain validation. The issue was discovered on May 29, 2019, by a support engineer during customer assistance. Following an internal investigation, DigiCert identified the root cause and took immediate action, including revoking 679 problematic certificates and reissuing 390 others. The faulty feature was disabled, and a new domain validation system was developed to prevent future occurrences. The incident was resolved with the implementation of a consolidated validation process by November 4, 2019.

1. 2019-05-29 DigiCert support engineer discovers validation mismatch.
2. 2019-06-01 Investigation completed; 1,069 problematic certificates identified.
3. 2019-11-04 New domain validation system fully deployed.

1. 2019-06-05 DigiCert — DigiCert provides detailed incident report and timeline of actions taken.
2. 2019-07-04 DigiCert — Training on compliance policies completed successfully.
3. 2019-11-05 DigiCert — DigiCert confirms successful deployment of the new validation system.