GlobalSign: Use of Domain Validation Random Value for more than 30 days

GlobalSign identified a compliance issue where random values used for domain validation exceeded the 30-day limit set by the Baseline Requirements. This oversight allowed 78 domains to be validated with expired random values, leading to the issuance of 101 certificates over a two-week period. All affected certificates were revoked by July 17, 2020. The incident prompted a review of their processes, resulting in a commitment to update random values every 28 days to prevent future occurrences.

1. 2020-05-31 Reset all random values for legacy product.
2. 2020-06-01 30-day random value limit requirement came into effect.
3. 2020-06-28 Script to reset random values failed.
4. 2020-07-01 Script executed to update random values.
5. 2020-07-15 All domains validated with expired RVs were reset.
6. 2020-07-17 All certificates issued with expired RVs were revoked.