← GlobalSign nv-sa cases
Bugzilla #1668007
Ca Certificate Compliance
GlobalSign: Invalid stateOrProvinceName value
RESOLVED
FIXED
GlobalSign nv-sa
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
GlobalSign identified a compliance issue involving several certificates that incorrectly included country names in the stateOrProvinceName field. The CA received multiple certificate problem reports starting on September 25, 2020, prompting an investigation. GlobalSign took immediate action by revoking the affected certificates and addressing the root cause of the issue. A full incident report was provided, detailing the timeline of actions taken and the measures implemented to prevent future occurrences. The case has been resolved with the issue fixed.
Chronology
- GlobalSign received multiple certificate problem reports regarding incorrect stateOrProvinceName values.
- GlobalSign submitted a full incident report detailing the actions taken.
- GlobalSign confirmed all affected certificates were revoked.
Thread Activity
- GlobalSign nv-sa — GlobalSign acknowledged the issue and stated they would revoke the affected certificates.
- GlobalSign nv-sa — GlobalSign provided a detailed incident report and timeline of actions taken.
- GlobalSign nv-sa — GlobalSign confirmed the completion of their review of internal verification procedures.
Participants
GlobalSign nv-sa
Fozzie representative
Community commenter
Mozilla representative
External References
Similar Local Cases
GlobalSign: Incorrect RegNumber-Org Type combination
GlobalSign: Misissuance of QWAC Certificates
GlobalSign: Empty SingleExtension in OCSP responses
GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields
GlobalSign: EV certificates with serialNumber Government Entity and businessCategory Private Organization
NetLock: Cumulative report connected to EV verification
Verify GlobalSign's continued conformance to EV guidelines
SECOM: Unqualified domain name in SAN