Telekom Security: Multiple commonName in certificates

This case involves Deutsche Telekom Security GmbH, which discovered multiple 'commonName' fields in several certificates, potentially violating Mozilla's CA policies. The issue was reported on April 16, 2021, and the CA acknowledged the problem on April 19, 2021. They updated their issuance system to prevent further issuance of certificates with multiple 'commonName' fields and committed to revoke the affected certificates by April 24, 2021. The CA has since completed the revocation and updated their internal rules to better assess anomalies in certificate issuance.

1. 2021-04-16 Bug reported regarding multiple commonName fields in certificates.
2. 2021-04-19 Deutsche Telekom Security acknowledged the issue and began investigating.
3. 2021-04-20 System changes implemented to prevent issuance of certificates with multiple commonNames.
4. 2021-04-24 All affected certificates were revoked.

1. 2021-04-16 Lebihan representative — Reported certificates with multiple commonName fields.
2. 2021-04-19 Telekom representative — Acknowledged the notification and began investigation.
3. 2021-04-20 Dfn-cert representative — Confirmed system changes to prevent future issuance of multiple commonNames.
4. 2021-04-24 Dfn-cert representative — All affected certificates have been revoked.