D-Trust: Issuance of 17 DV certificates containing ‘serialNumber’ field within subject

D-Trust issued 17 DV certificates containing the 'serialNumber' field in the subject after September 15, 2023, which was an internal reference number. Upon discovering the misissuance, D-Trust halted DV certificate production, analyzed the situation, and corrected the DV profile. They revoked 14 certificates by October 30, 2023, while one certificate was not revoked on time, leading to the opening of a new incident report. All affected customers were informed, and the remaining certificate was successfully revoked on October 31, 2023. D-Trust is currently reviewing the incident and has submitted a change request to ZLint to prevent future occurrences.

1. 2023-09-15 D-Trust issued 17 DV certificates containing the 'serialNumber' field in the subject.
2. 2023-10-30 Revocation of 14 deficient DV certificates completed.
3. 2023-10-31 Remaining deficient DV certificate successfully revoked.

1. 2023-10-25 Bdr representative — D-Trust issued a preliminary incident report regarding the issuance of DV certificates with 'serialNumber' in the subject.
2. 2023-10-30 Bdr representative — D-Trust provided an update on the incident, detailing the revocation of 14 DV certificates.
3. 2023-11-11 Bdr representative — D-Trust issued a final report summarizing the incident and corrective actions taken.
4. 2024-05-21 Mozilla representative — Inquiry about community comments before planning to close the bug.