Digicert: Government Entity listed instead of registration number
DigiCert received a report on April 13, 2024, regarding a TLS certificate that incorrectly listed 'Government Entity' instead of the required registration number. Upon investigation, DigiCert confirmed the misissuance and scheduled the revocation of the affected certificate for April 18, 2024. They identified a total of 27 certificates with similar issues and took steps to revoke them. The root cause was identified as a validation error due to the mixed data sources used for government entities in the Netherlands. DigiCert has since removed 'Government Entity' as an option for validation from their KVK source and implemented an escalation process for future cases. The issue has been resolved, and the bug is now closed.
- DigiCert received a report of a misissued certificate.
- DigiCert scheduled revocation of the affected certificate.
- All identified misissued certificates were revoked.
- DigiCert — DigiCert confirmed the misissuance and scheduled revocation.
- DigiCert — DigiCert reported the final list of impacted certificates.
- Mozilla representative — Mozilla inquired if DigiCert would sponsor a CABF ballot to clarify requirements.
- Mozilla representative — Mozilla planned to close the bug on May 1, 2024.