← Sectigo cases
Bugzilla #1712188
Certificate Misissuance
Sectigo: test certificates issued from trusted CA
RESOLVED
FIXED
Sectigo
AI Summary
Sectigo faced issues with the issuance of test certificates containing incorrect details, including fictitious organization names and mismatched locations. This was discovered after a report about a misissued certificate for a 'Test User.' Following the report, Sectigo revoked the problematic certificates and initiated an investigation, uncovering a total of 97 misissued certificates. The company has since implemented several corrective measures, including stricter validation processes and enhanced training for employees to prevent future occurrences. The case has been resolved with all necessary actions taken to ensure compliance.
Chronology
- Received report about a misissued certificate.
- Initial bug report filed.
- Revoked additional misissued certificates.
- Launched additional training for technical employees.
Participants
Claves Nostrum
Tim Callan
Ryan Sleevi
External References
Similar Local Cases
Sectigo: Incorrect EV businessCategory
Sectigo: State name in localityName
Sectigo: Inappropriate subject:serialNumber information in EV certificates obtained through ACME
Sectigo: Forbidden Domain Validation Method
Sectigo: Failure to revoke within 5 days
Sectigo: Invalid stateOrProvinceName
Sectigo: Incorrect JOI for federal credit unions
Sectigo: IP Address Domain Validation Failure