← Microsoft Corporation cases
Bugzilla #2032476 Certificate Misissuance

Microsoft PKI Services: Misissuance detected by PKIMetal

RESOLVED INVALID Microsoft Corporation
AI Summary

A third-party reporter flagged multiple end entity certificates issued by 'Microsoft Secure Server CA 2011' as having issues detected by PKIMetal. Microsoft clarified that these certificates are intended solely for Windows Operating System compatibility and are not part of the Microsoft Trusted Root Program (TRP). As such, they are not subject to the Baseline Requirements. Microsoft requested the case be closed as INVALID, asserting that no policies were violated.

Model: gpt-4o-mini Generated: 2026-06-13 21:31 UTC Confidence: 0.90
Chronology
  1. Bug opened regarding misissuance.
  2. Microsoft clarified the status of the certificates.
  3. Final call for comments before closure.
  4. Bug closed as INVALID.
Participants
incident-reporting@ccadb.org CentralPKI@microsoft.com rdaurne77@gmail.com hablutzel1@gmail.com ekbugzilla@fastmail.com certreporter@gmail.com
Related Bugzilla IDs Mentioned
Similar Local Cases
#2032468 ASSIGNED Certificate Misissuance Opened 2026-04-16 Still Open · 55% similar
VISA: Misissuance detected by PKIMetal
#1979475 RESOLVED Certificate Misissuance Opened 2025-07-26 · Closed 2026-01-20 · 55% similar
Microsoft PKI Services: End Entity Certificate Mis-issuance against CPS (BasicConstraints)
#2032485 RESOLVED Certificate Misissuance Opened 2026-04-16 · Closed 2026-05-04 · 54% similar
DigiCert: Misissuance detected by PKIMetal
#2009941 RESOLVED Certificate Misissuance Opened 2026-01-13 · Closed 2026-04-06 · 53% similar
Firmaprofesional: Misissuance of TLS Subordinate CA "AC Firmaprofesional - Secure Web 2024"
#2014609 RESOLVED Certificate Misissuance Opened 2026-02-05 · Closed 2026-04-11 · 52% similar
IdenTrust: Cross-signed root certificate mis-issuance
#1644936 RESOLVED Certificate Misissuance Opened 2020-06-11 · Closed 2024-05-09 · 49% similar
Microsoft PKI Services: Certificate Mis-Issuance, Locality Missing
#1670337 RESOLVED Certificate Misissuance Opened 2020-10-09 · Closed 2024-01-16 · 48% similar
Microsoft PKI Services: Certificate Mis-Issuance, DNSNames must have a valid TLD
#1706860 RESOLVED Certificate Misissuance Opened 2021-04-22 · Closed 2023-02-22 · 48% similar
Microsoft PKI Services: Certificate Mis-Issuance, DNSName is not FQDN, Preferred Name Syntax

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action