Microsoft PKI Services: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy

Microsoft PKI Services issued intermediate certificates after January 1, 2019, that did not comply with Mozilla's policy, specifically lacking the required Extended Key Usage (EKU) extensions. This issue was identified during a compliance check, leading to the creation of an incident report. Microsoft acknowledged the error, revoked the problematic certificates, and updated their processes to ensure compliance moving forward. The incident was resolved with no valid problematic certificates remaining.

1. 2019-05-14 Microsoft issued non-compliant intermediate certificates.
2. 2019-10-07 Incident bug 1586847 created.
3. 2019-10-14 Microsoft revoked the initial versions of the problematic CAs.
4. 2019-10-15 Incident report submitted by Microsoft.
5. 2019-11-25 All questions answered and remediation confirmed complete.