NetLock: Replacement of enduser certificates after the EVGL 1.7.4 self-audit

NetLock identified a compliance issue during a self-audit on November 20, 2020, regarding the absence of the CAB Forum Organization ID in their EV certificates, which was mandated by updates in the EVGL 1.7.4 guidelines. Following this discovery, NetLock halted certificate issuance, issued replacement certificates, and revoked nearly all affected certificates by December 31, 2020. The CA has since implemented new monitoring and compliance measures to prevent future issues, including the establishment of a task force to oversee compliance and policy changes.

1. 2020-11-20 NetLock identified the compliance issue during a self-audit.
2. 2020-11-23 Mandatory extension for new certificates was set.
3. 2020-12-01 Replacement certificates were issued.
4. 2020-12-31 Revocation of the last affected certificate.

1. 2020-12-02 Netlock — Submitted a report detailing the compliance issue and actions taken.
2. 2021-01-05 Netlock — Confirmed that all affected certificates were revoked on time.
3. 2021-01-08 Netlock — Indicated preparation of a new ticket to address further questions.
4. 2021-04-22 Netlock — Acknowledged past shortcomings and outlined new compliance measures.
5. 2022-02-14 Netlock — Reported on the establishment of a task force for compliance oversight.