Hongkong Post: Invalid EV cert businessCategory

Hongkong Post identified a compliance issue regarding the issuance of an Extended Validation (EV) certificate to Tung Wah Group of Hospitals, which was incorrectly categorized as a 'Government Entity'. The CA discovered this issue through a Bugzilla report and initiated an investigation. They confirmed the misclassification and took steps to reissue the affected certificates with the correct business category of 'Private Organization'. Remediation actions included updating their Certificate Policy Statement (CPS) and halting the issuance of new EV certificates until the issue was resolved. The certificates were successfully reissued, and the CA has implemented measures to prevent future occurrences.

1. 2023-06-05 Hongkong Post became aware of the misissuance issue through a Bugzilla report.
2. 2023-06-06 Hongkong Post updated their CPS and began the process to reissue the affected EV certificates.
3. 2023-06-09 Hongkong Post revoked the incorrectly issued EV certificate.
4. 2023-09-27 Hongkong Post confirmed that the issue has been fully remediated.

1. 2023-06-05 Community commenter — Reported that HKPost issued an EV certificate with an incorrect businessCategory.
2. 2023-06-05 Certizen representative — Acknowledged the issue and stated that an investigation was underway.
3. 2023-06-06 Certizen representative — Confirmed the problem and initiated the incident reporting process.
4. 2023-09-27 Certizen representative — Confirmed that the issue has been fully remediated and measures are in place to prevent recurrence.