Izenpe: Incorrect Unicode characters in Subject
Izenpe S.A. reported a compliance issue involving the issuance of a certificate containing incorrect Unicode replacement characters in the Subject fields, violating RFC5280. The incident was triggered by a change in their web application that affected the encoding of special characters. Upon notification from the Chrome Root Program, the affected certificate was revoked promptly. Izenpe has since implemented corrective actions, including the integration of the Pkimetal tool for pre-issuance linting and has committed to improving their testing processes to prevent similar issues in the future. The case has been resolved with all action items completed.
- A certificate with incorrect encoding in Subject was issued.
- The certificate was revoked after notification from the Chrome Root Program.
- Izenpe requested closure of the incident report after completing all action items.
- Izenpe S.A. — This is a preliminary report regarding Unicode replacement characters in Subject.
- Izenpe S.A. — On 2025-02-03 Izenpe issued a certificate containing Unicode Replacement characters.
- Izenpe S.A. — We have some delays regarding the configuration of Pkimetal on our testing environment.
- Izenpe S.A. — All Action Items disclosed in this report have been completed as described, and we request its closure.