← e-tugra cases
Bugzilla #1687139
Certificate Problem Report
E-Tugra: commonName not in SAN
RESOLVED
FIXED
e-tugra
AI Summary
E-Tugra issued a certificate with a commonName that was not included in the Subject Alternative Name (SAN) extension. The issue was reported by a user on January 15, 2021, and the certificate was subsequently reissued and marked for revocation. E-Tugra acknowledged the problem and provided a preliminary report detailing their response timeline and actions taken. They have since implemented additional validation controls to prevent similar issues in the future. The case has been resolved with the necessary updates to their processes.
Chronology
- Certificate issued
- Problem identified; new certificate issued
- User reports issue
- Bug created and assigned
- Security Group investigates and revokes certificate
- Case closed after resolution
Participants
George [:fozzie]
Davut Tokgöz
External References
Similar Local Cases
E-Tugra: The failure to revoke a certificate
E-Tugra: Validity period > 825 days
E-Tugra: Intermittent OCSP response with status 'Unknown'
E-Tugra: Delayed Response of Revocation Request
E-Tugra: Insufficient serial number entropy
Entrust: Failure to provide a preliminary report within 24 hours.
Sectigo: Failure to provide a preliminary report within 24 hours.
DigiCert: Failure to provide a preliminary report within 24 hours.