← GlobalSign nv-sa cases
Bugzilla #1714968
Certificate Misissuance
GlobalSign: Incorrect RegNumber-Org Type combination
RESOLVED
FIXED
GlobalSign nv-sa
AI Summary
GlobalSign was alerted to an issue involving four certificates that had an incorrect combination of registration number and organization type. The problem was identified through a certificate problem report on June 3, 2021. Following an internal investigation, GlobalSign found additional affected certificates and initiated revocation and replacement processes. The CA implemented several changes to its systems to prevent similar issues in the future, including validation rules for registration numbers and business categories. The case was resolved with all identified remedial actions completed by July 27, 2021.
Chronology
- Problem report received
- Investigation started and affected certificates identified
- All affected certificates revoked
- Changes to the GCC UI deployed
Participants
Eva Van Steenberge
Ryan Sleevi
Mathew Hodson
B Wilson
External References
Similar Local Cases
GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31
GlobalSign: Wrong business category (Non Commercial Entity when should have been Private Organization)
GlobalSign: TLS OV Certificate containing unverified information
DigiCert: Org-JOI type mismatch
GlobalSign: Use of Domain Validation Random Value for more than 30 days
SwissSign: MPKI step-up process sets wrong JoI Locality
eMudhra: emSign CA Invalid AIA Extension Value
GlobalSign: EV certificate with wildcard domain in common name and SAN