← Izenpe S.A. cases
Bugzilla #1945867 Certificate Misissuance

Izenpe: Incorrect Unicode characters in Subject

RESOLVED FIXED Izenpe S.A.
AI Summary

Izenpe S.A. issued a certificate containing incorrect Unicode replacement characters in the Subject fields, specifically in the Locality and Organization fields, which violates RFC5280. The issue was detected after an email from the Chrome Root Program prompted immediate revocation of the certificate. The root cause was traced to a change in the web application that mishandled character encoding. Although post-linting tools were in place, the issuing team failed to act on the warning email, leading to the incident. Remedial actions have been implemented, including the integration of a new linting tool to prevent future occurrences.

Model: gpt-4o-mini Generated: 2026-06-13 21:14 UTC Confidence: 0.90
Chronology
  1. A certificate with wrong encoding in Subject was issued.
  2. An email from Chrome Root Program warns about the issue.
  3. The certificate was revoked.
  4. A new version of the web application was deployed to fix the problem.
  5. Closure report submitted and all action items completed.
Participants
David Fernandez
External References
Similar Local Cases
#1651026 RESOLVED Certificate Misissuance Opened 2020-07-07 · Closed 2023-02-22 · 52% similar
Izenpe: certificate issued to internal domain
#1528290 RESOLVED Certificate Misissuance Opened 2019-02-15 · Closed 2023-02-22 · 51% similar
Izenpe: OU > 64 characters
#1398258 RESOLVED Certificate Misissuance Opened 2017-09-08 · Closed 2023-02-22 · 49% similar
Izenpe: Non-BR-Compliant OCSP Responders
#1653284 RESOLVED Certificate Misissuance Opened 2020-07-16 · Closed 2023-02-22 · 49% similar
Izenpe: incorrect value in stateOrProvinceName
#1559765 RESOLVED Certificate Misissuance Opened 2019-06-17 · Closed 2023-02-22 · 48% similar
Izenpe: Multiple invalid EV certificates issued
#1731586 RESOLVED Certificate Misissuance Opened 2021-09-20 · Closed 2023-02-22 · 43% similar
SwissSign: Certificate with key length 16258
#1884532 RESOLVED Certificate Misissuance Opened 2024-03-09 · Closed 2024-07-11 · 43% similar
ACCV: Certificates issued with cRLIssuer in CDP extension
#1695786 RESOLVED Certificate Misissuance Opened 2021-03-01 · Closed 2023-02-22 · 42% similar
SECOM: Unqualified domain name in SAN

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action