← GlobalSign nv-sa cases
Bugzilla #1579413
Certificate Problem Report
GlobalSign: OCSP Responder Returns invalid values for Some Precertificates
RESOLVED
INVALID
GlobalSign nv-sa
AI Summary
GlobalSign reported issues with their OCSP responder returning invalid values for certain precertificates. The problem arose because precertificates, which are treated as certificates, lacked operational OCSP and CRL services. GlobalSign is collaborating with PrimeKey to implement a patch and update their OCSP services. Regular updates were promised, but the incident was ultimately resolved as invalid after discussions on the Mozilla policy list.
Chronology
- Initial report of OCSP issues by GlobalSign.
- GlobalSign provided a status update on remediation efforts.
- Incident resolved as INVALID.
Participants
douglas.beattie@gmail.com
ryan.sleevi@gmail.com
wthayer@fastly.com
External References
Similar Local Cases
GlobalSign: SPKI lacks explicit NULL parameter,
GlobalSign: SSL Certificates with US country code and invalid State/Prov
GlobalSign: Virginia Tech Insufficient Serial Number Entropy
SSL.com: Precertificates without corresponding certificates return OCSP value of "Unknown"
Atos: Insufficient Serial Number Entropy
GDCA: Insufficient Serial Number Entropy
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy