← DarkMatter LLC cases
Bugzilla #1667518
Certificate Problem Report
QuoVadis: Incorrect keyUsage for ECC certificate
RESOLVED
FIXED
DarkMatter LLC
AI Summary
QuoVadis identified an issue with a small number of ECC certificates issued between February and November 2019 that incorrectly included the keyEncipherment keyUsage. The problem was discovered during monitoring of Bugzilla filings, leading to an investigation that confirmed the issuance of nine affected certificates. QuoVadis has since revoked these certificates and implemented measures to prevent future occurrences, including a review of certificate profiles and integration into DigiCert's compliance processes.
Chronology
- QuoVadis identified the issue and began investigation.
- Investigation completed; nine problem certificates identified.
- Subscribers informed; revocation scheduled.
- Nine affected certificates confirmed revoked.
Participants
Stephen Davidson
Mathew Hodson
Ryan Sleevi
B. Wilson
External References
Similar Local Cases
QuoVadis: hostnames not in preferred name syntax
QuoVadis: N/A in EV serialNumber field
QuoVadis: BR Error - san dns name starts with period
QuoVadis: use of Organisationidentifier field in EV (Pre CABF Ballot SC17)
QuoVadis: Failure to revoke certificates with compromised private keys
QuoVadis: EV serialNumber with "none"
Actalis: inaccurate value in stateOrProvinceName
QuoVadis: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy or the BRs