← DigiCert cases
Bugzilla #1936908
Certificate Misissuance
DigiCert: Encoded HTML entities in attribute values
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert identified a compliance issue where six certificates were issued with HTML-encoded attribute values due to an outdated version of their internal linter, pkilint. The CA discovered this issue during post-issuance scans and promptly revoked the misissued certificates within the required timeframe. DigiCert has since updated pkilint to the latest version and implemented additional checks to prevent similar issues in the future. They have committed to improving their internal processes for linter updates and monitoring. All action items related to this incident have been completed, and the case is now resolved.
Chronology
- DigiCert discovers six certificates with HTML-encoded attribute values.
- All misissued certificates are revoked.
- DigiCert implements new checks in issuance pathways.
- All action items are confirmed complete.
Thread Activity
- DigiCert — Six certificates were issued with HTML-encoded attribute values; we are in the process of revoking them.
- DigiCert — Incident report detailing the cause and remediation steps is provided.
- DigiCert — Confirmed completion of action items related to the incident.
- Mozilla representative — Scheduled for closure unless further issues arise.
Participants
DigiCert
Sectigo
Mozilla representative
Community commenter
External References
Similar Local Cases
DigiCert: Typo in TLS Org Name
DigiCert: Random value in CNAME without underscore prefix
DigiCert: Invalid Characters in S/MIME Subject Fields
DigiCert: Org information issue in new validation workflow
DigiCert: Incorrect case in Business Category
DigiCert: Misissued code signing certificates
DigiCert: Incorrect Org ID Scheme in S/MIME
Telia: Certificates Issued with lower case value in subject:countryName