← Sectigo cases
Bugzilla #1721271
Ca Certificate Compliance
Sectigo: Missing registration numbers in EV certificates
RESOLVED
FIXED
Sectigo
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Sectigo reported a compliance issue involving 47 misissued EV certificates due to missing registration numbers. The problem was identified after receiving a report from another CA on June 11, 2021. Sectigo revoked the affected certificates on June 16, 2021, and has since outlined steps to prevent future occurrences, including implementing programmatic checks for registration numbers. The CA acknowledged the delay in reporting the incident and committed to improving their disclosure process. The issue has been resolved with the implementation of new checks.
Chronology
- Sectigo received a report of misissued certificates from another CA.
- Sectigo revoked the 47 misissued certificates.
- Sectigo's new QGIS matching checks went live.
Thread Activity
- Sectigo — Sectigo disclosed the incident and outlined the timeline and actions taken.
- Community commenter — Encouraged Sectigo to expedite incident reporting.
- Sectigo — Sectigo acknowledged the need for improved peer review and transparency.
- Sectigo — Announced the successful deployment of QGIS matching checks.
- Sectigo — Confirmed that all relevant information has been covered.
Participants
Community commenter
External References
Similar Local Cases
Sectigo: State name in localityName
Sectigo: invalid subject:organizationalUnitName on DV certificates
Sectigo: EV SSL Certificates with incorrect subject details.
Sectigo: Incorrect JOI for federal credit unions
Sectigo: Incorrect JOI
Sectigo: Use of forbidden subjectPublicKeyInfo algorithm
Sectigo: CPR response issues
Sectigo: Subject field with unvalidated information included in certificates