SECOM: Mis-issued EV Certificates

SECOM Trust Systems CO., LTD. reported a mis-issuance of EV certificates after being alerted by a user about issues with four certificates. The CA investigated and found additional problematic certificates, leading to the revocation of a total of 12 certificates. SECOM provided a detailed incident report, including a timeline of actions taken and the nature of the compliance failures. The CA has since revised its procedures to prevent future occurrences. The case has been resolved with the issue marked as fixed.

1. 2019-08-19 SECOM became aware of the mis-issuance after a user report.
2. 2019-08-20 SECOM revoked three of the problematic certificates.
3. 2019-08-21 SECOM completed the revocation of the last problematic certificate.

1. 2019-08-23 Secom representative — SECOM reported the mis-issued EV certificates and detailed their investigation and revocation actions.
2. 2019-08-30 Community commenter — Asked for details about SECOM's review procedures prior to and following certificate issuance.
3. 2019-09-06 Secom representative — SECOM clarified their validation process and acknowledged the need for procedural improvements.
4. 2019-09-26 Fastly representative — Confirmed that all questions have been answered and remediation is complete.