← GlobalSign nv-sa cases
Bugzilla #1744518
Certificate Problem Report
GlobalSign: EV certificates with serialNumber Government Entity and businessCategory Private Organization
RESOLVED
FIXED
GlobalSign nv-sa
AI Summary
GlobalSign issued two EV SSL certificates that incorrectly used 'Government Entity' as the serial number while categorizing the business as a 'Private Organization'. The issue was reported on December 3, 2021, leading to an investigation and subsequent revocation of the certificates on December 8, 2021. GlobalSign has since updated their validation rules and implemented additional monitoring to prevent similar issues in the future. The case has been resolved with all remedial actions completed.
Chronology
- Certificate problem report received
- Certificates revoked
- All vetting agents retrained on the issue
Participants
Paul Brown
Arvid Vermote
Eva Vansteenberge
B Wilson
External References
Similar Local Cases
GlobalSign: Three (3) revoked precertificates with reasonCode “certificateHold”
GlobalSign: Invalid stateOrProvinceName value
GlobalSign: Invalid stateOrProvinceName and locality pair
GlobalSign: Failure to revoke noncompliant certificates within 5 days
GlobalSign: EV TLS certificate with only metadata in JOI State field
GlobalSign: Issuing CA certificate with wrong notBefore date
GlobalSign: Certificate issued with RSASSA-PSS public key
GlobalSign: OCSP responder certificates with more than 64 characters in CN