DigiCert: Missed Underscore Certificate Revocations

DigiCert identified a failure to revoke 17 valid certificates containing underscores, which were not included in their incident reports. The issue arose from a flaw in their data extraction script, which led to missed revocations. DigiCert has since ceased issuing underscore certificates and is actively revoking the problematic certificates. They have implemented measures to enhance their data reporting processes to prevent future occurrences.

1. 2019-02-01 Third party reported unrevoked underscore certificates.
2. 2019-02-06 DigiCert revoked remaining valid underscore certificates.
3. 2019-02-07 DigiCert began revoking pre-certificates without valid certificates.
4. 2019-10-01 DigiCert ceased issuance of underscore certificates.