← DigiCert cases
Bugzilla #2015186
Ca Certificate Compliance
Certificate Misissuance
DigiCert: Subject Serial Numbers for Non-Commercial Entities
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
A security researcher filed a Certificate Problem Report regarding discrepancies in the `Subject:serialNumber` field of EV certificates issued to Non-Commercial Entity subjects by DigiCert. The report noted that DigiCert had issued certificates with a specific identifier in one year but reverted to using the term 'International Organization Entity' in subsequent renewals, which was deemed inappropriate. DigiCert confirmed the issue, revoked 374 affected certificates, and implemented a new escalation tile in their validation workflow to prevent similar occurrences in the future. The incident was resolved with all affected certificates revoked and no remaining valid certificates.
Chronology
- Preliminary Incident Report filed by DigiCert
- Escalation tile implemented in validation workflow
- All affected certificates revoked
- Incident report closure summary posted
Thread Activity
- DigiCert — Preliminary Incident Report filed regarding a Certificate Problem.
- DigiCert — Full Incident Report submitted with details on affected certificates.
- DigiCert — Report Closure Summary posted, confirming all actions taken.
- DigiCert — Closure summary confirmed and no further updates provided.
Participants
DigiCert
HARICA
CCADB representative
Community commenter
External References
Similar Local Cases
DigiCert: Misissuance detected by PKIMetal
DigiCert: Some certificates issued with CRLDPs that don’t exactly match CCADB disclosures
DigiCert: TERENA: Insufficient validation of organizationalUnitName
DigiCert: Invalid localityName
DigiCert: EV for Onion addresses without Tor Service Descriptor
DigiCert: Org-JOI type mismatch
DigiCert: Use of forbidden subjectPublicKeyInfo algorithm
DigiCert: TERENA: No localityName in EV precert