← Network Solutions cases
Bugzilla #1726333
Self Reported Incident
Certificate Misissuance
Network Solutions: All test CA test website certificates are expired
RESOLVED
FIXED
Network Solutions
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Network Solutions, which discovered that all test CA website certificates were expired, violating the Baseline Requirements. The issue was initially reported by an external party on August 13, 2021, and Network Solutions was informed by Sectigo about the expired certificates. Following the discovery, Network Solutions issued new test certificates and announced plans to transition to a managed CA model by Sectigo to prevent future occurrences. The bug was resolved with the implementation of new certificates and a strategy to avoid similar issues in the future.
Chronology
- Bug opened regarding expired test CA certificates.
- New test website certificates deployed.
- Target date for full transition to managed service set for November 8, 2021.
Thread Activity
- Thisisntrocket representative — All certificates on the Test Websites in CCADB for the Network Solutions CA are expired.
- Thisisntrocket representative — Received an update from Sectigo that test certificates were issued and installed.
- Endurance representative — Network Solutions and Sectigo decided to transition to a managed CA model.
- Endurance representative — Provided a detailed incident report outlining the timeline and causes of the issue.
- Endurance representative — Confirmed that the bug has been addressed and asked if it can be closed.
Participants
Thisisntrocket representative
Endurance representative
Nekollc representative
Mozilla representative
External References
Similar Local Cases
Network Solutions: 2021 Audit Observation #1
Network Solutions: 2021 Audit Observation #3
SwissSign: Certificate with key length 16258
GlobalSign: Invalid countryName
Asseco DS / Certum: Subordinate certificates with sequential serial number
Amazon Trust Services: Missing CAA Check For Test Website Certificates
Let's Encrypt: TLS Using ALPN TLS Version and OID
Sectigo: Misspellings in stateOrProvince or localityName fields