← PostSignum cases
Bugzilla #2021239
Incident
PostSignum: Length Subject organizationName
RESOLVED
FIXED
PostSignum
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
PostSignum disclosed an incident involving the issuance of certificates with an organization name exceeding the 64-character limit, violating their CA Certificate Policy. The issue was identified after a third-party report on February 18, 2026, leading to an internal investigation that confirmed the non-compliance on March 2, 2026. PostSignum ceased issuing such certificates and acknowledged the error, emphasizing that they prioritized the full legal name over compliance with technical standards. All impacted certificates, totaling 12, were revoked by April 2, 2026. The CA has committed to preventing future occurrences of this issue.
Chronology
- Received a Certificate Problem Report regarding a certificate with an organization name longer than 64 characters.
- Confirmed the non-compliance regarding the organization name length.
- All impacted certificates were revoked.
Thread Activity
- Cpost representative — Opened the bug to inform about the incident regarding the length of the Subject organizationName.
- Cpost representative — Submitted a full incident report detailing the non-compliance and the steps taken.
- Cpost representative — Provided a report closure summary confirming all impacted certificates have been revoked.
Participants
Cpost representative
Community commenter
CCADB representative
External References
Similar Local Cases
IdenTrust: Test Certificates from cross-signed roots not disclosed in CT Logs
IdenTrust: Root OCSP Signer certificate mis-issuance
DigiCert: Several non-functioning AIA URLs
NETLOCK: Missing CDP Disclosure in CCADB
NETLOCK: did not file a preliminary incident report or respond to a third-party report within the 72-hour timeframe
certSIGN: certificates with delayed SCT signature
Certigna: Multiple Reserved Certificate Policy Identifiers in CA certificates
Microsoft PKI Services: Failure to update action item status within 3 days