NETLOCK: SSL certificates with OU field

NETLOCK identified that multiple SSL certificates issued after September 1, 2022, contained an Organizational Unit (OU) field, which is not compliant with current requirements. Upon discovering this issue, NETLOCK modified its internal processes to prevent the issuance of certificates with the OU field and notified affected customers about the need to revoke their certificates. The revocation and reissuance of compliant certificates were scheduled to occur between March 1 and March 16, 2023. The issue was disclosed in Bugzilla on March 3, 2023, and all affected certificates were renewed by the defined deadline. NETLOCK has since updated its internal policies and established new linting processes to ensure compliance.

1. 2023-03-02 NETLOCK received notification about the OU field in issued certificates.
2. 2023-03-03 NETLOCK disclosed the issue in Bugzilla.
3. 2023-03-16 Last certificate without the OU field was renewed.

1. 2023-03-03 Netlock — We became aware of multiple SSL certificates created by NETLOCK containing the OU field and have taken steps to modify our processes.
2. 2023-03-10 Netlock — We provided a detailed timeline of actions taken in response to the issue.
3. 2023-05-17 Netlock — All certificates were renewed by the defined deadline, and internal policies were updated.
4. 2023-07-28 Mozilla representative — It doesn't appear there are any other questions, so I'll close this ticket.