← e-commerce monitoring GmbH cases
Bugzilla #1716123
Ca Certificate Compliance
Certificate Misissuance
Self Reported Incident
e-commerce monitoring GmbH: CN domain not in SAN
RESOLVED
FIXED
e-commerce monitoring GmbH
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves e-commerce monitoring GmbH, which discovered a compliance issue where a certificate was issued without the Common Name (CN) included in the Subject Alternative Name (SAN) field. This was reported by a user who found a leaf certificate that did not meet the expected standards. In response, the CA immediately halted the issuance of SSL certificates and revoked the problematic certificate. They committed to providing a detailed incident report and have since implemented additional pre-issuance checks to prevent similar issues in the future. The incident report was completed and shared with stakeholders, and the CA has since resolved the issue.
Chronology
- A compliance issue was discovered regarding a certificate issued by e-commerce monitoring GmbH.
- The CA halted SSL certificate issuance and revoked the problematic certificate.
- The CA provided a full incident report detailing the compliance failure.
- The CA confirmed the implementation of pre-issuance linting to enhance compliance checks.
Thread Activity
- Lebihan representative — Reported a certificate without the domain in CN in SAN.
- e-commerce monitoring GmbH — Confirmed the revocation of the certificate and commitment to a transparent investigation.
- e-commerce monitoring GmbH — Attached the full incident report for review.
- e-commerce monitoring GmbH — Announced the realization of pre-issuance linting.
Participants
Lebihan representative
Community commenter
e-commerce monitoring GmbH
Mm representative
Mozilla representative
External References
Similar Local Cases
e-commerce monitoring GmbH: Revoked test website not using revoked certificate
GlobalSign: Invalid countryName
Microsoft PKI Services: Underscore in SAN
CFCA: Wrong SerialNumber encoding
GlobalSign: Incorrect RegNumber-Org Type combination
KIR S.A.: CN domain not in SAN
Asseco DS / Certum: Invalid stateOrProvinceName field (recurrent incident)
Camerfirma: certificate for unregistered domain cuatis.net