← DigiCert cases
Bugzilla #1618256
Ca Certificate Compliance
Self Reported Incident
DigiCert: Failure to properly encode Subject name
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert identified a compliance issue involving the improper encoding of Subject names in certificates during an internal audit. The audit revealed that 33 certificates contained errors, such as organization names exceeding 64 characters and non-informational values in the OU field. Following the discovery, DigiCert revoked the problematic certificates within five days and reported the incident to Mozilla. The CA has since implemented a comprehensive approach to prevent similar issues in the future, including system-wide scans of all active certificates. The case is now resolved with the necessary actions taken.
Chronology
- DigiCert's compliance analytics team ran a linter analysis on existing active certificates.
- DigiCert revoked 33 active certificates identified with errors.
- Ryan Sleevi opened Bug 1618256 to file a separate incident report.
Thread Activity
- DigiCert — DigiCert provided an incident report detailing the compliance violation and actions taken.
- Fastly representative — Confirmed that all questions have been answered and remediation is complete.
Participants
Community commenter
DigiCert
Fastly representative
External References
Similar Local Cases
DigiCert: Underscores - CVS Pharmacy
DigiCert: Underscores - Verizon
DigiCert: Issuance of Cert with Compromised Key
DigiCert: Inconsistent EV audits
DigiCert: Incorrect RegNumber-Org Type combination
DigiCert / Wells Fargo: Invalid DNS names
DigiCert: Failure to provide a preliminary report within 24 hours.
DigiCert: Malformed ICA