← e-commerce monitoring GmbH cases
Bugzilla #1883711
Certificate Misissuance
e-commerce monitoring gmbh: precertificate validity does not match leaf certificate
RESOLVED
WONTFIX
e-commerce monitoring GmbH
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
E-commerce monitoring GmbH received a Certificate Problem Report on March 4, 2024, indicating a mismatch in validity periods between a precertificate and its corresponding leaf certificate. The CA investigated and confirmed the issue, which stemmed from a bug in their issuance system that incorrectly used the current date for the leaf certificate instead of the precertificate's date. Both certificates were revoked shortly after issuance. The CA has committed to addressing the root cause and has outlined an action plan, including retraining and code analysis, to prevent future occurrences. As of June 30, 2024, e-commerce monitoring GmbH will be removed from browser root programs due to identified process shortcomings.
Chronology
- Issuance of a precertificate with a validity period mismatch.
- Issuance of the corresponding leaf certificate.
- Receipt of a Certificate Problem Report regarding the validity mismatch.
- Removal of e-commerce monitoring GmbH from browser root programs.
Thread Activity
- e-commerce monitoring GmbH — Reported the issue and initiated an investigation.
- e-commerce monitoring GmbH — Posted an incident report detailing the findings and actions taken.
- e-commerce monitoring GmbH — Acknowledged the decision to remove the CA from root programs and outlined future commitments.
Participants
e-commerce monitoring GmbH
Internet Security Research Group
Mm representative
HARICA
External References
Similar Local Cases
e-commerce monitoring GmbH: CN domain not in SAN
PostSignum: Mis-issued certificate
e-commerce monitoring GmbH: SCT in precertificate
IdenTrust: unintended creation of a Root CA certificate
Chunghwa Telecom: Failure to check restrictive CAA record during Migration
HARICA: subject:organizationIdentifier using VATEL as a prefix for tax identifier
SSL.com: CAA Empty set handling results in Wildcard issuance
Camerfirma: suspicious certificate for com.com