← Sectigo cases
Bugzilla #1829746
Certificate Misissuance
Sectigo: Certificate issuance delayed for more than 398 days after DCV was completed
RESOLVED
FIXED
Sectigo
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Sectigo reported a compliance issue regarding the issuance of an EV certificate for presentephemere.com, which was delayed for over 398 days after Domain Control Validation (DCV) was completed. The CA became aware of the issue following an inquiry from their auditor. Upon investigation, Sectigo confirmed the misissuance and revoked the affected certificate on April 18, 2023. They subsequently identified additional affected certificates, leading to multiple revocation events. The investigation concluded with the final revocation completed on May 25, 2023, and remediation measures were implemented by April 22, 2023.
Chronology
- Sectigo revoked the misissued certificate.
- Sectigo completed the revocation of additional affected certificates.
Thread Activity
- Sectigo — Sectigo reported the delay in certificate issuance and initiated an investigation.
- Sectigo — Sectigo discussed potential loopholes in the Baseline Requirements related to DCV.
- Sectigo — Sectigo confirmed that 21 additional EV certificates were affected and scheduled revocation.
- Sectigo — Sectigo confirmed findings on additional affected certificates and scheduled further revocations.
- Sectigo — Sectigo completed the investigation and requested to close the bug.
Participants
Sectigo
Mozilla representative
External References
Similar Local Cases
Sectigo: SMIME issuance with insufficient validation of mailbox authorization or control
Sectigo: SC45 DCV Reuse Error
Sectigo: Subject field with unvalidated information included in certificates
Sectigo: Incorrectly included registrationStateOrProvince in PSD-based cabfOrganizationIdentifier extension
Sectigo: Failure to block disallowed LDH labels in domain names
Sectigo: S/MIME certificates with (null) string value in subject attributes
Sectigo: EV SSL Certificates with incorrect subject details.
Sectigo: Invalid postalCode field