← Actalis cases
Bugzilla #1648997
Certificate Problem Report
Actalis: inaccurate value in stateOrProvinceName
RESOLVED
FIXED
Actalis
AI Summary
Actalis identified an issue with SSL Server certificates containing an incorrect value, 'München', in the stateOrProvinceName field instead of the correct 'Bayern'. This problem was reported on June 27, 2020, and affected a total of 20 certificates issued to the same subscriber. The root cause was determined to be human error during the vetting process. Actalis has since revoked most affected certificates and is implementing measures to prevent future occurrences, including integrating a third-party geographical database into their management system.
Chronology
- Initial report received regarding incorrect stateOrProvinceName.
- Actalis confirmed the issue and began revocation process.
- Root cause identified as human error in vetting process.
- Decision made to delay revocation of one certificate at customer's request.
- Integration of geographical database completed.
Participants
Adriano Santoni
George
Ryan Sleevi
Mathew Hodson
B. Wilson
External References
Similar Local Cases
Actalis: Incorrect OCSP Delegated Responder Certificate
QuoVadis: Incorrect keyUsage for ECC certificate
Actalis: pre-certificates with “certificateHold” as the revocation reason
Actalis: Failure to revoke within 7 days: OCSP EKU issue
Actalis: incorrect CP/S Last Update date in CCADB
Actalis: Certificates issued with validity period greater than 398 days
Actalis: CRL with duplicate serial number in revokedCertificates
Actalis: CRL distribution point with ldap scheme