← MULTICERT cases
Bugzilla #1637093
Certificate Problem Report
Multicert: AIA CA Issuer field pointing to PEM encoded cert
RESOLVED
FIXED
MULTICERT
AI Summary
Multicert identified an issue where the CA certificate file linked in the Authority Information Access (AIA) of end entity certificates was incorrectly encoded in PEM format instead of the required DER format. This was reported on May 11, 2020, and after confirming the issue, Multicert replaced the CA certificate file with the correct DER encoded version within hours. No misissued certificates were reported, and the incident did not require revocation of any end user certificates. Multicert has since updated its procedures to ensure compliance with the DER format requirement.
Chronology
- Notification received about incorrect PEM encoding
- Investigation confirmed the issue and resolution started
- CA certificate file replaced with DER encoded version
Participants
ca.forum@multicert.com
bwilson@mozilla.com
ryan.sleevi@gmail.com
External References
Similar Local Cases
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
Let's Encrypt: Failure to revoke key-compromised certificate within 24 hours
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
GoDaddy: Failure to revoke key-compromised certificates within 24 hours
SwissSign: failure to provide a preliminary report within 24 hours
SSL.com: Issuance of an EV TLS certificate with incorrect O Field Value
SSL.com: Issuance of 3 EV TLS certificates without 2-person validation of the organization information
Sectigo: Failure to revoke key-compromised certificate within 24 hours