GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31

GlobalSign disclosed a compliance failure involving the issuance of a leaf certificate with an RSA-1024 key, which contravenes the Baseline Requirements established over seven years ago. The CA became aware of the issue through a Bugzilla report on February 4, 2021, and promptly revoked the certificate. An incident report was submitted detailing the timeline of events and actions taken, including enabling linting for their certificate issuance processes. Remedial actions have been completed, including the deployment of an additional linter to prevent future occurrences.

1. 2021-02-04 GlobalSign issued a leaf certificate with an RSA-1024 key.
2. 2021-02-04 GlobalSign revoked the non-compliant certificate.
3. 2021-02-09 GlobalSign submitted a detailed incident report.
4. 2021-04-27 GlobalSign completed all remedial actions.

1. 2021-02-04 Sectigo — Reported the issuance of a leaf certificate with an RSA-1024 key.
2. 2021-02-04 GlobalSign nv-sa — Confirmed the revocation of the certificate and promised an incident report.
3. 2021-02-09 GlobalSign nv-sa — Submitted a detailed incident report outlining the timeline and actions taken.
4. 2021-04-27 GlobalSign nv-sa — Announced the completion of all remedial actions.