← SECOM Trust Systems CO., LTD. cases
Bugzilla #1576133
Certificate Misissuance
SECOM: Mis-issued EV Certificates
RESOLVED
FIXED
SECOM Trust Systems CO., LTD.
AI Summary
SECOM Trust Systems CO., LTD. reported mis-issued Extended Validation (EV) certificates after being alerted by a user. The CA investigated and found multiple certificates that violated EV guidelines, leading to the revocation of 12 certificates. The incident was resolved with a commitment to improve their review processes to prevent future occurrences. SECOM has since revised their procedures to ensure compliance with certificate issuance standards.
Chronology
- SECOM became aware of the mis-issued certificates.
- Revocation of 3 certificates completed.
- Last certificate revoked, completing the revocation process.
- Case marked as resolved.
Participants
Yuu Hidaka
Ryan Sleevi
Wayne Thayer
Tadahiko Ito
External References
Similar Local Cases
SECOM: Failure to disclose Unconstrained Intermediate within 7 Days
SECOM: "Default City" in Subject:localityName
SECOM: Unqualified domain name in SAN
SECOM: TSA Certs Issued from Root
Chunghwa Telecom: Test certificate with unregistered domain name
SECOM: Undisclosed intermediate certificates
QuoVadis: Multiple unreported misissuances in 2018
DigiCert: "Some-State" in stateOrProvinceName