NAVER Cloud Trust Services: OV certificate issued with OU field

NAVER Cloud Trust Services identified an issue where an OV SSL certificate was issued with an Organization Unit (OU) field on June 28, 2023. Upon discovering this compliance failure during a security check on July 13, 2023, the CA promptly revoked the affected certificate. An incident report was initiated, detailing the timeline and root cause analysis, which revealed a failure in the validation logic of their internal certificate issuance system. The CA has since implemented measures to prevent similar misissuances, including stopping the issuance of certificates using externally generated CSRs and enhancing validation checks. The issue has been fully remediated as of September 27, 2023.

1. 2023-06-28 OV certificate issued with OU field
2. 2023-07-13 Certificate revoked after discovery of compliance issue
3. 2023-09-27 Remediation measures fully implemented

1. 2023-07-13 Navercorp representative — We became aware of an OV SSL certificate with OU field issued and have revoked the affected certificate.
2. 2023-07-17 Navercorp representative — An incident report was initiated detailing the timeline and actions taken.
3. 2023-09-27 Navercorp representative — The root cause of this issue has been addressed, and measures to prevent its recurrence have been fully implemented.