← DigiCert cases
Bugzilla #1515788 · Certificate Misissuance
DigiCert: Underscores - CVS Pharmacy
DigiCert · RESOLVED
AI Summary
DigiCert faced an incident involving the issuance of certificates containing underscores for CVS Pharmacy. The issue arose during a critical enrollment period, leading to a complex migration plan for certificate replacement. The company committed to revoking the affected certificates by February 8, 2019, ahead of the original timeline. The incident highlighted the challenges of managing certificate changes during high-traffic periods and the need for thorough risk assessments.
Chronology
- Bug filed regarding underscores in certificates
- DigiCert confirmed incident and planned revocation
- All affected certificates revoked
Participants
Jeremy Rowley
Brenda Bernal
Ryan Sleevi
External References
Similar Local Cases
DigiCert: "Some-State" in stateOrProvinceName
DigiCert: Domain validation skipped
DigiCert: Validation Scope Incident
DigiCert: Underscores - Intuit
DigiCert: Internal Domain Name cert mis-issuance
DigiCert: SHA-1 intermediate issued after 2016-01-01
DigiCert / Swiss Government: CommonName not in SANs
DigiCert / Siemens: Insufficient Serial Number Entropy