Dhimyotis / Certigna: Certificates issued with validity periods greater than 398-days

This case involves Dhimyotis/Certigna, which issued certificates with validity periods exceeding the 398-day limit mandated by the Baseline Requirements. The issue was identified internally, and the CA acknowledged a configuration error that resulted in the issuance of certificates with a duration of 398 days and 1 second. Following the discovery, Certigna promptly updated its certificate generation service to prevent future occurrences and initiated the revocation of the affected certificates. By October 26, 2020, all non-compliant certificates had been revoked, and the CA committed to improving its practices to ensure compliance with the validity period requirements.

1. 2020-09-28 Dhimyotis/Certigna identified and acknowledged the issuance of non-compliant certificates.
2. 2020-10-26 All affected certificates were revoked.

1. 2020-09-28 Sectigo — Reported that Certigna issued certificates with validity periods greater than 398 days.
2. 2020-09-28 Dhimyotis representative — Acknowledged the issue and promised a consolidated response.
3. 2020-09-29 Certigna — Confirmed the issuance of non-compliant certificates due to a configuration error.
4. 2020-09-30 Dhimyotis representative — Confirmed initiation of the revocation process for the affected certificates.
5. 2020-10-26 Dhimyotis representative — Informed that all affected certificates have been revoked.