← Actalis cases
Bugzilla #1648997
Certificate Misissuance
Actalis: inaccurate value in stateOrProvinceName
RESOLVED
FIXED
Actalis
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Actalis discovered an issue where SSL Server certificates incorrectly listed 'München' instead of 'Bayern' in the stateOrProvinceName field. The CA was alerted by a user on June 27, 2020, and began an investigation, confirming the error later that day. A total of 20 certificates were affected, and while most were revoked, one certificate was delayed at the customer's request. The root cause was identified as human error during the vetting process, and Actalis plans to integrate a third-party geographical database to prevent future occurrences. The issue was resolved, and the bug was marked as fixed.
Chronology
- Actalis received a report about incorrect stateOrProvinceName values in SSL certificates.
- Actalis confirmed the error and began revocation of affected certificates.
- Actalis integrated a geographical database to improve vetting accuracy.
Thread Activity
- Staff representative — Actalis acknowledged the issue and began investigating the reported problem.
- Staff representative — Actalis identified human error as the root cause of the misissuance.
- Staff representative — Actalis confirmed the integration of the geographical database was completed.
Participants
Staff representative
Fozzie representative
Community commenter
Mozilla representative
External References
Similar Local Cases
Actalis: Issuance of intermediates after 2020-08-20 that do not comply with Mozilla Policy and the Baseline Requirements
Actalis: Non-BR-Compliant Certificate Issuance
Actalis: CRL distribution point with ldap scheme
Actalis: Use of CRLReason Code in Certificate Revocation
Actalis: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy
GlobalSign: Invalid stateOrProvinceName and locality pair
Sectigo: Lack of input validation in stateOrProvinceName
Asseco DS / Certum: Invalid stateOrProvinceName field (recurrent incident)