← GlobalSign nv-sa cases
Bugzilla #1707073
Certificate Misissuance
Self Reported Incident
GlobalSign: Invalid countryName
RESOLVED
FIXED
GlobalSign nv-sa
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves GlobalSign's discovery of an invalid 'countryName' in a certificate, which was reported by a user. Upon investigation, GlobalSign confirmed the issue and revoked the affected certificate on April 22, 2021. They initiated an internal investigation to identify the root cause and committed to providing a detailed incident report. The CA has since implemented measures to prevent similar issues, including daily automated checks and a review of their configuration processes. The incident report was provided on April 28, 2021, detailing the timeline and actions taken in response to the incident.
Chronology
- GlobalSign revoked the certificate due to an invalid countryName.
- GlobalSign submitted a detailed incident report.
Thread Activity
- Lebihan representative — Reported an issue with the certificate having 'UK' in 'countryName'.
- GlobalSign nv-sa — Confirmed the issue and stated they would revoke the certificate.
- GlobalSign nv-sa — Confirmed the certificate was revoked and an incident report would be provided.
- GlobalSign nv-sa — Submitted the incident report detailing the investigation and actions taken.
Participants
Lebihan representative
Thisisntrocket representative
Community commenter
GlobalSign nv-sa
Mozilla representative
External References
Similar Local Cases
GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31
GlobalSign: Invalid stateOrProvinceName and locality pair
GlobalSign: Incorrect RegNumber-Org Type combination
GlobalSign: S/MIME Sponsor validated certificates with CommonName value equal to OrganizationName
GlobalSign: OV TLS certificate with incorrect countryName value for organization
GlobalSign: 4 Misissued certificates with invalid CN
GlobalSign: SSL Certificates with US country code and invalid State/Prov
GlobalSign: Wrong business category (Non Commercial Entity when should have been Private Organization)