← Sectigo cases
Bugzilla #1650845
Ca Certificate Compliance
Self Reported Incident
Sectigo: CPR response issues
RESOLVED
FIXED
Sectigo
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Sectigo's response to a misissuance incident reported by a user regarding a specific certificate. The user noted that Sectigo provided incorrect information about the revocation status of the certificate, which was not reflected in OCSP or CRL responses as required. After multiple communications, Sectigo confirmed the certificate was revoked on June 29, 2020, but acknowledged that misleading information was given initially. The CA is currently investigating improvements to their customer service systems to prevent similar issues in the future.
Chronology
- User reported misissuance of a certificate to Sectigo.
- Sectigo revoked the problematic certificate.
Thread Activity
- Thisisntrocket representative — Reported multiple incorrect statements from Sectigo regarding certificate revocation.
- Sectigo — Provided a timeline of actions taken by Sectigo in response to the incident.
- Community commenter — Questioned the adequacy of Sectigo's proposed solutions to prevent future issues.
- Sectigo — Confirmed readiness to close the bug following the resolution of related issues.
Participants
Thisisntrocket representative
Sectigo
Community commenter
Mozilla representative
External References
Similar Local Cases
Sectigo: Incorrect OCSP responses
Sectigo: Subject field with unvalidated information included in certificates
Sectigo: Failure to block disallowed LDH labels in domain names
Sectigo: Incorrect JOI for federal credit unions
Sectigo: Failure to provide timely incident reports
Sectigo: EV SSL Certificates with incorrect subject details.
Sectigo: invalid subject:organizationalUnitName on DV certificates
Sectigo: Non-revocation of certificates with subject:organizationalUnitName in DV certificates