HARICA: 3 EV TLS Certificates without L or ST

HARICA identified three EV TLS certificates that were issued without the required localityName or stateOrProvinceName attributes during internal quality checks. The CA scheduled the revocation of these certificates within five days and initiated an incident report detailing the issue and remediation steps. The root cause was linked to a misconfiguration of the certificate profile and misunderstanding among validation specialists regarding the requirements. All problematic certificates were revoked as planned, and the CA updated its processes to prevent future occurrences, including enhancing training materials and linting configurations.

1. 2019-11-17 HARICA discovered three EV TLS certificates issued without required attributes.
2. 2019-11-21 All problematic certificates were revoked.

1. 2019-11-17 HARICA — Internal checks identified three EV TLS Certificates issued without required attributes.
2. 2019-11-18 HARICA — An incident report was created detailing the issue and actions taken.
3. 2019-11-22 HARICA — All problematic certificates were revoked as planned.
4. 2019-12-04 Fastly representative — It appears that all questions have been answered and remediation is complete.