GlobalSign: Empty SingleExtension in OCSP responses

RESOLVED FIXED GlobalSign nv-sa

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

GlobalSign identified a compliance issue related to empty SingleExtensions in OCSP responses during a gap analysis of changes to the Baseline Requirements. The issue was traced back to their legacy platform using EJBCA, which was not compliant with RFC standards. GlobalSign informed PrimeKey of the problem and awaited a fix. PrimeKey released a new version that addressed the issue, and GlobalSign is currently testing this release before updating their live systems. The migration of OCSP responders to new systems has been completed successfully, ensuring compliance.

Model: gpt-4o-mini Generated: 2026-06-13 21:28 UTC Revised: 2026-06-16 18:55 UTC Confidence: 0.85 14 comments

Chronology

2020-09-07 GlobalSign noticed an issue with OCSP responses.
2021-02-22 Migration of all OCSP responders was completed.

Thread Activity

2020-09-29 GlobalSign nv-sa — GlobalSign reported the compliance issue and outlined their response timeline.
2020-11-09 GlobalSign nv-sa — GlobalSign confirmed that PrimeKey released a fix for the issue.
2021-01-19 GlobalSign nv-sa — GlobalSign updated that they were on schedule to complete migration of OCSP responders.
2021-02-24 GlobalSign nv-sa — GlobalSign confirmed the completion of migration for all OCSP responders.

Participants

GlobalSign nv-sa Mozilla representative Community commenter

External References

Original Bugzilla Case doc.primekey.com

Similar Local Cases

#1714968 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2021-06-07 · Closed 2023-02-22 · 96% similar

GlobalSign: Incorrect RegNumber-Org Type combination

AI Summary CA Owner

#1668007 RESOLVED Ca Certificate Compliance Opened 2020-09-29 · Closed 2023-02-22 · 94% similar

GlobalSign: Invalid stateOrProvinceName value

AI Summary CA Owner

#1623356 RESOLVED Ca Certificate Compliance Opened 2020-03-18 · Closed 2023-02-22 · 94% similar

GlobalSign: Misissuance of QWAC Certificates

AI Summary CA Owner

#1390997 RESOLVED Ca Certificate Compliance Incident Revocation Issue Opened 2017-08-16 · Closed 2023-02-22 · 85% similar

GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields

AI Summary CA Owner

#586414 RESOLVED Ca Certificate Compliance Incident Opened 2010-08-11 · Closed 2022-11-14 · 78% similar

Verify GlobalSign's continued conformance to EV guidelines

AI Summary CA Owner

#1760311 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2022-03-18 · Closed 2023-02-22 · 76% similar

GlobalSign: OCSP responder certificates with more than 64 characters in CN

AI Summary CA Owner

#1624527 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2020-03-24 · Closed 2023-02-22 · 76% similar

DigiCert: Issuance of Cert with Compromised Key

AI Summary CA Owner

#1725039 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2021-08-10 · Closed 2023-02-22 · 75% similar

Network Solutions: 2021 Audit Observation #1

AI Summary CA Owner