← certSIGN cases
Bugzilla #1763173
Certificate Problem Report
certSIGN: Incorrect data in stateOrProvinceName
RESOLVED
FIXED
certSIGN
AI Summary
certSIGN encountered an issue with an OV SSL certificate where the stateOrProvinceName was incorrectly filled. This error arose due to a bug in the CA software update that bypassed the automatic verification process. The problem was identified on April 4, 2022, leading to the revocation of the pre-certificate the same day. certSIGN has since rolled back the update and implemented measures to prevent similar issues in the future, including enhanced validation processes.
Chronology
- Certificate issued with incorrect stateOrProvinceName
- Update rollback to previous configuration
- Internal incident created
- Certificate revoked
- Analysis for process improvement started
- Issue reported to Bugzilla
- Planned update deployed in production
Participants
Gabriel PETCU
Ryan Sleevi
External References
Similar Local Cases
certSIGN: Delayed revocation
certSIGN: delay in updating a Bugzilla ticket
certSIGN: Certificates with incorrect Subject attribute order
certSIGN: Missing certificate from the list of bad order subject attributtes
certSIGN: Non-BR-Compliant OCSP Responders
certSIGN: certificates with delayed SCT signature
certSIGN: Delayed response to CPR
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #4 – Expired cert with bad order of attributes