Network Solutions: 2021 Audit Observation #1

This case involves Network Solutions' disclosure of a compliance issue identified during a 2021 audit, specifically regarding the absence of the Digital Signature bit in certain CA certificates used for direct OCSP signing. The issue was raised by Mozilla's Ben Wilson, leading to discussions about the implications of this oversight. Network Solutions argued that their practices were in line with pre-Baseline Requirements (BR) standards, but the conversation highlighted the need for compliance with current BRs. Ultimately, Network Solutions decided to transition to a managed CA model through Sectigo, ceasing the issuance of certificates under their own roots by November 2021.

1. 2021-08-10 Bug reported regarding compliance issues with Network Solutions' CA certificates.
2. 2021-11-16 Network Solutions completed transition to a managed CA model.

1. 2021-08-10 Mozilla representative — Raised concerns about Network Solutions CA certificates lacking the Digital Signature bit.
2. 2021-09-09 Community commenter — Emphasized that using the root CA private key to sign OCSP responses without the Digital Signature bit constitutes an incident.
3. 2021-10-08 Endurance representative — Announced the decision to transition to a managed CA model.
4. 2021-11-16 Endurance representative — Confirmed completion of the transition to a managed CA model.