← GlobalSign nv-sa cases
Bugzilla #1599775
Certificate Misissuance
GlobalSign: Wrong business category (Non Commercial Entity when should have been Private Organization)
RESOLVED
FIXED
GlobalSign nv-sa
AI Summary
GlobalSign identified an issue where three EV SSL certificates were incorrectly categorized as 'Non-Commercial Entity' instead of 'Private Organization'. This error was reported by a third party, leading to a swift internal review and the conclusion that the certificates were non-compliant. GlobalSign took immediate action, revoking the certificates by November 29, 2019, and implementing additional training and monitoring to prevent future occurrences. The misunderstanding stemmed from a breakdown in the manual vetting process, which has since been addressed through updated training materials and compliance checks.
Chronology
- Notification received about misclassified certificates.
- Certificates revoked.
Participants
Eva Van Steenberge
Ryan Sleevi
External References
Similar Local Cases
GlobalSign: Incorrect RegNumber-Org Type combination
GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31
GlobalSign: Use of Domain Validation Random Value for more than 30 days
Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"
GlobalSign: TLS OV Certificate containing unverified information
GlobalSign: EV certificate with wildcard domain in common name and SAN
SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier
GlobalSign: S/MIME Sponsor validated certificates with CommonName value equal to OrganizationName