Microsoft PKI Services: Certificate Mis-Issuance, Locality Missing

This case involves Microsoft PKI Services reporting a misissuance of eight certificates that lacked locality and state or province values. The issue was discovered during x509 lint tests on April 29, 2020, shortly after the certificates were issued on April 28. Microsoft revoked the certificates the same day upon discovering the error, which occurred due to manual issuance outside their automated process. The CA has since implemented enhanced manual quality checks and plans to update their automated tools to prevent similar issues in the future. The case has been resolved with no certificates delivered to customers.

1. 2020-04-28 Eight certificates issued without locality or state values.
2. 2020-04-29 Certificates revoked after failing lint tests.

1. 2020-06-11 Microsoft Corporation — Reported the misissuance incident and outlined the timeline of actions taken.
2. 2020-06-13 Fastly representative — Requested clarification on manual quality checks and expressed concerns about the delay in reporting.
3. 2020-07-20 Mozilla representative — Inquired about improvements to incident reporting turnaround time.
4. 2020-07-23 Microsoft Corporation — Confirmed plans to improve reporting processes and update automated tools.
5. 2020-07-27 Community commenter — Expressed encouragement regarding Microsoft's commitment to transparency.