← D-TRUST cases
Bugzilla #1896190
Ca Certificate Compliance
D-Trust: Issuance of an EV certificate containing a mixup of the Subject's postalCode and localityName
RESOLVED
FIXED
D-TRUST
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
D-Trust issued an EV certificate with a mix-up between the Subject's postalCode and localityName, which was reported by a third party on May 9, 2024. The CA acknowledged the issue and revoked the affected certificate within the required 5-day period. An internal analysis revealed that the mix-up occurred during the application process and was not detected by validation specialists. D-Trust has implemented a postcode check and provided training to prevent similar issues in the future. The incident has been resolved, and the necessary corrective actions have been completed.
Chronology
- D-Trust was informed by a third party about the certificate issue.
- D-Trust revoked the affected certificate.
- D-Trust confirmed completion of all corrective measures.
Thread Activity
- Bdr representative — D-Trust issued a preliminary report on the incident.
- Bdr representative — D-Trust confirmed the revocation of the affected certificate.
- Bdr representative — D-Trust provided a final incident report detailing the root cause and corrective actions.
- Bdr representative — D-Trust requested closure of the incident after implementing all measures.
Participants
Bdr representative
Community commenter
Mozilla representative
External References
Similar Local Cases
D-TRUST: Issuance of non-conformant SSL certificate
D-TRUST: Certificate with RSA key where modulus is not divisible by 8
D-Trust: Missed Revocation of TLS certificates affected by Bugzilla 1884714
D-TRUST: Wrong key usage (Key Encipherment)
D-TRUST: Private Key Disclosed by Customer as Part of CSR
D-Trust: QCStatement with http link of PKI Disclosure Statements
D-Trust: CRL HTTP Media Type
Financijska agencija (Fina): Mis-issued certificates