Sectigo: S/MIME OV Mis-issuance

This case involves a misissuance of S/MIME certificates by Sectigo for the organization Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. The issue was raised by a user who noted discrepancies in the state and organization identifier fields of the certificate, claiming they violated S/MIME Baseline Requirements. Sectigo acknowledged the concerns and stated they would revoke the certificates in question. After further discussion, Sectigo concluded that their issuance was compliant with the S/MIME BRs, but recognized the need for clarification in the language of the requirements. They have proposed updates to address these issues and are working towards a resolution.

1. 2024-09-06 Certificate issued to Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. with incorrect details.
2. 2024-10-07 Sectigo requested to close the bug after determining the need for clarification in the S/MIME BRs.

1. 2024-09-07 Magicalcodewit representative — Reported misissuance of S/MIME certificate by Sectigo.
2. 2024-09-09 Sectigo — Acknowledged the bug report and promised a response.
3. 2024-09-09 Sectigo — Stated that the organization identifier was deemed correct despite the user's claims.
4. 2024-09-16 Sectigo — Concluded the investigation, marking the user's claims as not an incident.
5. 2024-10-07 Sectigo — Requested to close the bug, citing the need for clarification in the SBRs.