← Asseco Data Systems S.A. cases
Bugzilla #1711208
Self Reported Incident
Certificate Misissuance
Asseco DS / Certum: Incorrect localityName
RESOLVED
FIXED
Asseco Data Systems S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Asseco Data Systems S.A. identified three certificates with an incorrect localityName field while analyzing a related bug. The CA discovered the issue on May 14, 2021, and subsequently revoked the affected certificates by June 16, 2021. They implemented additional checks for localityName as part of their address validation process and are developing automated verification methods to prevent future errors. The CA has confirmed that they have ceased issuing certificates with this problem and are actively working on improving their verification processes.
Chronology
- Asseco DS discovered three certificates with an incorrect localityName.
- All identified certificates were revoked.
Thread Activity
- Assecods representative — Found 3 certificates with an invalid localityName field.
- Assecods representative — Completed analysis and found an additional 16 certificates with errors.
- Assecods representative — All certificates mentioned were revoked.
- Mozilla representative — Scheduled for closure unless there are further questions.
Participants
Assecods representative
Fozzie representative
Community commenter
Mozilla representative
External References
Similar Local Cases
Asseco DS / Certum: Incorrect OCSP response encoding
Asseco DS / Certum: Failure to provide a preliminary report within 24 hours.
Asseco DS / Certum: Invalid stateOrProvinceName field (recurrent incident)
Asseco DS / Certum: CAA Mis-Issuance on CNAME pointing directly to restrictive CAA record
Asseco DS / Certum: Subordinate certificates with sequential serial number
Asseco DS / Certum: TLS EV certificates with incorrect Subject attribute order
Asseco DS / Certum: Cross-Signed non-EV-audited root with an EV-enabled root
GlobalSign: Invalid stateOrProvinceName and locality pair