Sectigo: Updates for Sectigo’s Guard Rails project

RESOLVED INCOMPLETE INCOMPLETE Sectigo

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

This case involves Sectigo's updates regarding their Guard Rails project, which aims to implement programmatic checks to enhance compliance and reduce misissuance of certificates. The project is not a response to a specific compliance incident but rather a proactive initiative to improve issuance quality. Updates include the introduction of various checks and adjustments to existing processes, such as enforcing matching fields for government entities and implementing a Character Set Review for Subject Name attributes. The bug was marked as RESOLVED INCOMPLETE as it serves as a repository for ongoing updates rather than addressing a specific incident.

Model: gpt-4o-mini Generated: 2026-06-13 20:57 UTC Revised: 2026-06-16 18:54 UTC Confidence: 0.85 15 comments

Chronology

2021-08-06 Sectigo announces the creation of a repository for updates on their Guard Rails project.
2021-09-30 Character Set Review functionality goes live to enhance validation processes.
2021-11-09 QGIS matching Guard Rails are implemented to improve compliance checks.

Thread Activity

2021-08-06 Sectigo — This bug is not a response to a particular CA Compliance incident but a general update repository for our Guard Rails project.
2021-08-06 Sectigo — Marking this bug as RESOLVED INCOMPLETE since it is not tied to a specific compliance incident.
2021-09-30 Sectigo — Character set review has been implemented and is now in production.

Participants

Sectigo OISTE Community commenter

External References

Original Bugzilla Case

Similar Local Cases

#1563579 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2019-07-04 · Closed 2023-02-22 · 100% similar

Sectigo: Failure to provide timely incident reports

AI Summary CA Owner

#1718771 RESOLVED Self Reported Incident Revocation Issue Opened 2021-06-30 · Closed 2023-02-22 · 95% similar

Sectigo: DCV Reuse after 825 days

AI Summary CA Owner

#1736064 RESOLVED Ca Certificate Compliance Certificate Misissuance Self Reported Incident Opened 2021-10-15 · Closed 2023-02-22 · 94% similar

Sectigo: Subject field with unvalidated information included in certificates

AI Summary CA Owner

#1650845 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2020-07-06 · Closed 2024-06-30 · 88% similar

Sectigo: CPR response issues

AI Summary CA Owner

#1715024 RESOLVED Certificate Misissuance Self Reported Incident Opened 2021-06-07 · Closed 2023-02-22 · 87% similar

Sectigo: Misspellings in stateOrProvince or localityName fields

AI Summary CA Owner

#1741026 RESOLVED Ca Certificate Compliance Revocation Issue Self Reported Incident Opened 2021-11-13 · Closed 2023-02-22 · 86% similar

Sectigo: Incorrect JOI for federal credit unions

AI Summary CA Owner

#1796803 RESOLVED Self Reported Incident Opened 2022-10-21 · Closed 2023-02-22 · 86% similar

Sectigo: Issuance of ECC leaf certificates with non-DER encoded keyUsage

AI Summary CA Owner

#1942651 RESOLVED Self Reported Incident Policy Document Issue Opened 2025-01-20 · Closed 2025-02-14 · 86% similar

Sectigo / SSL.com: Late disclosure of updated SSL.com CP/CPS to CCADB

AI Summary CA Owner