← Network Solutions cases
Bugzilla #1725039
Certificate Problem Report
Network Solutions: 2021 Audit Observation #1
RESOLVED
FIXED
Network Solutions
AI Summary
This case addresses an incident involving Network Solutions where certain CAs were found to perform direct OCSP signing without the required Digital Signature bit in their certificates. The issue was raised during a 2021 audit and led to discussions about compliance with the Baseline Requirements (BRs). Network Solutions argued that their practices were in line with historical norms for pre-BR roots, but the Chrome Root Authority Program deemed their actions noncompliant. Ultimately, Network Solutions decided to transition to a managed CA model, ceasing to issue new certificates from their own roots.
Chronology
- Bug reported by Ben Wilson regarding OCSP signing issues.
- Chrome Root Authority Program declares Network Solutions' OCSP signing noncompliant.
- Network Solutions announces transition to managed CA model.
- Transition to managed CA model completed.
Participants
Ben Wilson
Keith McKenney
Ryan Sleevi
Rob Stradling
Matthias
Sectigo Team
External References
Similar Local Cases
Sectigo: OCSP responses directly signed using root certificates without KU=digitalSignature
Network Solutions: 2021 Audit Findings 1-3
Network Solutions: All test CA test website certificates are expired
Entrust: SSL Certificates issued with Un-verified IP Addresses
E-Tugra: Intermittent OCSP response with status 'Unknown'
Sectigo: DCV Reuse after 825 days
KIR S.A.: CN domain not in SAN
Sectigo: CPR response issues