Actalis: Certificates issued with invalid RDN order

RESOLVED FIXED Actalis

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

Actalis reported a compliance issue regarding the order of Subject Attributes in TLS EV certificates, which was identified after receiving a report on March 4, 2024. Following an internal investigation, Actalis confirmed that 263 certificates were affected due to a mis-issuance related to the streetAddress attribute's encoding order. The CA ceased issuing new TLS EV certificates as a precaution and revoked all affected certificates within the required timeframe. The incident was documented, and a new linting tool was developed to prevent future occurrences. The case has been resolved with all actions completed.

Model: gpt-4o-mini Generated: 2026-06-13 21:30 UTC Revised: 2026-06-16 18:07 UTC Confidence: 0.90 22 comments

Chronology

2024-03-04 Actalis received a report regarding potential issues with EV certificate attribute order.
2024-03-11 Actalis confirmed the mis-issuance and decided to revoke all affected certificates.
2024-03-15 All affected certificates were revoked.

Thread Activity

2024-03-05 Staff representative — Actalis posted a preliminary report regarding the incident.
2024-03-15 Staff representative — Update: All certificates affected by this bug are revoked.
2024-06-10 Mozilla representative — I will close this on Wed. 12-June-2024 unless there are any questions or comments.

Participants

Staff representative Google representative Mozilla representative Community commenter

External References

Original Bugzilla Case bug1883731.bmoattachments.org

Similar Local Cases

#1973238 RESOLVED Self Reported Incident Policy Document Issue Opened 2025-06-20 · Closed 2025-09-24 · 90% similar

Actalis: incorrect CP/S Last Update date in CCADB

AI Summary CA Owner

#2012157 RESOLVED Self Reported Incident Revocation Issue Security Incident Opened 2026-01-23 · Closed 2026-03-08 · 89% similar

Actalis: Issuance of certificate using keys previously reported as compromised

AI Summary CA Owner

#1824319 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2023-03-24 · Closed 2023-07-20 · 88% similar

Actalis: pre-certificates with “certificateHold” as the revocation reason

AI Summary CA Owner

#1904041 RESOLVED Ca Documents Self Reported Incident Opened 2024-06-21 · Closed 2025-07-01 · 85% similar

NETLOCK: Intermediate CA Certificate not disclosed to CCADB

AI Summary CA Owner

#1390974 RESOLVED Certificate Misissuance Self Reported Incident Opened 2017-08-16 · Closed 2023-02-22 · 85% similar

Actalis: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1894560 RESOLVED Self Reported Incident Certificate Misissuance Opened 2024-05-01 · Closed 2024-07-03 · 84% similar

DigiCert: Incorrect case in Business Category

AI Summary CA Owner

#1649961 RESOLVED Self Reported Incident Opened 2020-07-02 · Closed 2023-02-22 · 83% similar

Actalis: Incorrect OCSP Delegated Responder Certificate

AI Summary CA Owner

#1405817 RESOLVED Certificate Misissuance Self Reported Incident Opened 2017-10-04 · Closed 2023-02-22 · 81% similar

Actalis: Certs issued with same issuer and serial number

AI Summary CA Owner