← Microsec Ltd. cases
Bugzilla #1676352
Certificate Misissuance
Incident
Microsec: Certificate validity period greater than 398 days
RESOLVED
FIXED
Microsec Ltd.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Microsec Ltd. reported the misissuance of two CISCO VPN server authentication certificates with a validity period exceeding 398 days. The CA discovered the issue during an internal quality check and promptly revoked both certificates within 24 hours of issuance. The incident was documented, and Microsec identified a flaw in their certificate profile management system as the root cause. They have since implemented corrective measures, including a review of all certificate profiles and improvements to their management system to prevent future occurrences. The case has been resolved with the status marked as 'FIXED'.
Chronology
- Revocation of two misissued CISCO VPN server authentication certificates.
Thread Activity
- Lebihan representative — Reported two certificates issued with a validity of 2 years.
- Mozilla representative — Documented the incident and requested a timeline of actions taken.
- Microsec representative — Provided a status report detailing actions taken to resolve the misissuance.
- Microsec representative — Confirmed that the affected certificate profile was suspended and improvements were made.
- Microsec representative — Updated on the ongoing investigation and improvements to the certificate management system.
- Mozilla representative — Indicated intention to close the bug as resolved.
Participants
Lebihan representative
DigiCert
Mozilla representative
Microsec representative
Community commenter
External References
Similar Local Cases
Microsec: Misissuance of one OV certificate with Key Usage KeyEncipherment
Microsec: Misissuance an EV TLS certificate without CPSuri
Amazon Trust Services: Misissuance of Subordinate Per CPS
Microsoft PKI Services: Certificate Mis-Issuance, DNSNames must have a valid TLD
Microsec: Incorrect OCSP Delegated Responder Certificate
Camerfirma: Invalid stateOrProvinceName field
GlobalSign: Certificates with RSA keys where modulus is not divisible by 8
Microsec: Validity period greater than 825 days