← Sectigo cases
Bugzilla #1829746
Certificate Problem Report
Sectigo: Certificate issuance delayed for more than 398 days after DCV was completed
RESOLVED
FIXED
Sectigo
AI Summary
Sectigo experienced a significant delay in issuing a certificate for over 398 days after completing Domain Control Validation (DCV). The issue arose when an auditor inquired about the DCV date, leading to the discovery of the delay. Following an internal investigation, Sectigo confirmed the misissuance and revoked the affected certificate. They also identified additional certificates that were similarly impacted, leading to a series of revocations. The remediation process was completed on April 22, 2023, and the investigation concluded with no further issues identified.
Chronology
- Order for EV certificate received and DCV completed.
- Applicant inquired about the order, leading to resumption of processing.
- Certificate revoked after confirming misissuance.
- Final revocation of additional affected certificates completed.
Participants
Martijn Katerbarg
Rob Sectigo
External References
Similar Local Cases
Sectigo: SC45 DCV Reuse Error
Sectigo: Missing character in subject:organizationName attribute value
Sectigo: Failure to block disallowed LDH labels in domain names
Sectigo: Incomplete Subject organizationName
Sectigo: S/MIME certificates with (null) string value in subject attributes
Sectigo: Failure to invalidate Email DCV Random Values after 30 days
Sectigo: HTML encoded characters in subject attribute values
Sectigo: Incorrectly included registrationStateOrProvince in PSD-based cabfOrganizationIdentifier extension