← Sectigo cases
Bugzilla #1714193
Certificate Problem Report
Sectigo: Incorrect locality information
RESOLVED
FIXED
Sectigo
AI Summary
Sectigo identified two certificates issued with incorrect locality and postal code information during an internal audit on May 6, 2021. Both certificates were issued to the same organization three months apart, containing identical errors in the localityName field. Following the discovery, the certificates were revoked on May 10, 2021, and the RA partner responsible for the issuance had their privileges removed. Sectigo has committed to ensuring such errors do not recur by enhancing their auditing processes and removing the partner's RA privileges.
Chronology
- Internal audit discovers incorrect locality and postal code information in two certificates.
- Both certificates are revoked.
- RA privileges of the partner responsible for the misissuance are removed.
Participants
Tim Callan
Matthias
Ryan Sleevi
Eric Kramer
External References
Similar Local Cases
Sectigo: CPR response issues
Sectigo: DCV Reuse after 825 days
Sectigo: Failure to block disallowed LDH labels in domain names
Sectigo: Misspellings in stateOrProvince or localityName fields
Sectigo: Inadequate DCV
Sectigo: invalid subject:organizationalUnitName on DV certificates
Sectigo: Missing registration numbers in EV certificates
Sectigo: Mojibake in certificate Subject fields