Microsoft PKI Services: Misissuance detected by PKIMetal

RESOLVED INVALID Microsoft Corporation

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

A third-party reporter flagged multiple end entity certificates issued by 'Microsoft Secure Server CA 2011' as having issues detected by PKIMetal. Microsoft PKI Services clarified that these certificates are intended solely for Windows Operating System compatibility and are not part of the Microsoft Trusted Root Program (TRP). They requested the bug be closed as INVALID, asserting that no policies or requirements were violated. The incident was discussed in relation to a broader context of compliance with the CA/B Forum Guidelines and CCADB Guidelines. The case was ultimately resolved with a request for closure as INVALID.

Model: gpt-4o-mini Generated: 2026-06-13 21:31 UTC Revised: 2026-06-16 19:26 UTC Confidence: 0.85 13 comments

Chronology

2026-04-16 Bug opened regarding misissuance of certificates
2026-05-07 Bug closed as INVALID

Thread Activity

2026-04-16 CCADB representative — Reported multiple certificates with invalid domain name syntax.
2026-04-17 Microsoft Corporation — Clarified that the certificates are not publicly trusted and do not meet the definition of an incident.
2026-04-22 Microsoft Corporation — Requested closure of the bug as INVALID.
2026-05-01 CCADB representative — Final call for comments before closing the bug as INVALID.

Participants

CCADB representative Microsoft Corporation Community commenter

External References

Original Bugzilla Case learn.microsoft.com github.com github.com ccadb.my.salesforce-sites.com

Related Bugzilla IDs Mentioned

#2032356

Similar Local Cases

#1979475 RESOLVED Self Reported Incident Certificate Misissuance Opened 2025-07-26 · Closed 2026-01-20 · 95% similar

Microsoft PKI Services: End Entity Certificate Mis-issuance against CPS (BasicConstraints)

AI Summary CA Owner

#1674561 RESOLVED Certificate Misissuance Opened 2020-10-31 · Closed 2023-02-22 · 79% similar

Microsoft PKI Services: DV certificate issued with OV fields

AI Summary CA Owner

#1705419 RESOLVED Certificate Misissuance Self Reported Incident Opened 2021-04-15 · Closed 2023-02-22 · 78% similar

Microsoft PKI Services: Underscore in SAN

AI Summary CA Owner

#1718991 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2021-07-02 · Closed 2024-05-09 · 78% similar

Microsoft PKI Services: Malformed ICAs (Key Usage Malformed)

AI Summary CA Owner

#1421820 RESOLVED Ca Security Vulnerability Certificate Misissuance Opened 2017-11-29 · Closed 2022-11-14 · 77% similar

Microsoft DSRE PKI: Microsoft shares wildcard certificates among cloud instances

AI Summary CA Owner

#1884461 RESOLVED Certificate Misissuance Opened 2024-03-08 · Closed 2024-05-20 · 77% similar

Microsoft PKI Services: CA Certificates not published in DER Encoded Format

AI Summary CA Owner

#1961406 RESOLVED Certificate Misissuance Opened 2025-04-18 · Closed 2025-07-02 · 75% similar

SSL.com: DCV bypass and issue fake certificates for any MX hostname

AI Summary CA Owner

#1986968 RESOLVED Ca Certificate Compliance Certificate Misissuance Closure Request Opened 2025-09-04 · Closed 2026-04-06 · 75% similar

Financijska agencija (Fina): Mis-issued certificates

AI Summary CA Owner