← DarkMatter LLC cases
Bugzilla #1589047
Certificate Problem Report
QuoVadis: Incorrect EV jurisdiction of incorporation information
RESOLVED
FIXED
DarkMatter LLC
AI Summary
This case addresses the misissuance of an EV certificate by QuoVadis due to incorrect jurisdiction of incorporation information. The issue was reported on September 19, 2019, leading to the revocation of the original certificate and the issuance of a replacement shortly thereafter. A detailed investigation revealed that the root cause involved manual data entry errors by validation staff, insufficient technical enforcement, and a lack of focus on the final certificate structure during internal audits. As a result, over 5,500 certificates were revoked and replaced due to similar issues. The remediation process has been completed, and the case is now resolved.
Chronology
- Certificate Problem Report sent to QuoVadis.
- Original certificate revoked and replacement issued.
- Remediation complete; request to close the bug.
Participants
Corey Bonnell
Stephen Davidson
Ryan Sleevi
Jeremy Rowley
Brenda Bernal
External References
Similar Local Cases
QuoVadis: EV serialNumber with "none"
QuoVadis: use of Organisationidentifier field in EV (Pre CABF Ballot SC17)
QuoVadis: Failure to provide a preliminary report within 24 hours.
QuoVadis: Failure to revoke certificates with compromised private keys
QuoVadis: failure to reply to CPR in a timely manner
QuoVadis: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy or the BRs
QuoVadis: Incorrect keyUsage for ECC certificate
QuoVadis: Incorrect OCSP Delegated Responder Certificate