GlobalSign: Misissuance of QWAC Certificates

GlobalSign reported a misissuance of four QWAC certificates, three of which were found to be non-compliant. The CA identified the issues through its auditing process shortly after issuance and has since revoked the problematic certificates. An incident report was created detailing the timeline of events, including communication with customers and revocation dates. GlobalSign has halted the issuance of QWAC certificates until the validation agents are retrained and system patches are applied. The CA is also implementing a format validator to ensure compliance with jurisdictional requirements for future certificates.

1. 2020-03-05 GlobalSign issued QWAC certificates, later identified as non-compliant.
2. 2020-03-20 GlobalSign revoked the non-compliant QWAC certificates.

1. 2020-03-18 Community commenter — GlobalSign reported the misissuance of QWAC certificates and outlined the compliance issues.
2. 2020-03-23 Community commenter — An incident report was created detailing the timeline and actions taken.
3. 2020-04-03 GlobalSign nv-sa — GlobalSign confirmed the implementation of an internal format validator for compliance.
4. 2020-07-17 Mozilla representative — The bug is set to be closed unless further issues arise.