GlobalSign: Certificate issued with RSASSA-PSS public key

GlobalSign reported an incident involving the issuance of a certificate with an RSASSA-PSS public key, which was flagged by their post-issuance checks. The certificate was revoked shortly after its issuance. GlobalSign conducted an investigation to determine why their pre-issuance checks failed to prevent this certificate from being issued. They identified that a configuration issue in their validator settings allowed the certificate to be issued despite it not meeting compliance requirements. The CA has since updated its documentation and processes to prevent similar issues in the future, including implementing log shipping and monitoring tools to ensure proper validator configurations.

1. 2020-04-16 GlobalSign issued a certificate with RSASSA-PSS public key.
2. 2020-04-16 The certificate was revoked after being flagged by post-issuance checks.
3. 2020-04-30 GlobalSign provided a full incident report detailing the investigation and corrective actions.
4. 2020-07-01 GlobalSign confirmed that log shipping and configuration verification measures were successfully implemented.

1. 2020-04-17 GlobalSign nv-sa — Initial incident report submitted regarding the issuance of a certificate with RSASSA-PSS public key.
2. 2020-04-22 Community commenter — Inquired about the completion of a proper incident report.
3. 2020-04-30 GlobalSign nv-sa — Submitted the full incident report detailing the investigation and corrective actions.
4. 2020-07-06 Mozilla representative — Closed the ticket as completed/fixed.