← Government of Korea, KLID cases
Bugzilla #2032478
Self Reported Incident
Certificate Misissuance
Government of Korea: Misissuance detected by PKIMetal
ASSIGNED
Government of Korea, KLID
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The Government of Korea, KLID, acknowledged a misissuance incident involving certain OV TLS Subscriber Certificates issued under the legacy GPKIRootCA1 hierarchy. The issues were identified by PKIMetal and included prohibited key usage and improper CRL distribution points. Following the report, KLID initiated an incident investigation, revoked the affected certificates, and conducted a comprehensive review of all valid certificates. As of June 5, 2026, all identified non-compliant certificates have been revoked, and KLID has committed to strengthening its internal controls to prevent future occurrences. A full incident report was published detailing the timeline and actions taken.
Chronology
- Bug 2032478 was opened, reporting certificate profile issues.
- KLID became technically aware of the shared profile issue.
- KLID revoked the initially identified certificates.
- KLID confirmed that all affected certificates were revoked.
Thread Activity
- CCADB representative — Report of misissuance issues detected by PKIMetal.
- Klid representative — KLID acknowledged the issues and initiated an incident investigation.
- Klid representative — KLID provided a full incident report summary.
- Klid representative — KLID confirmed all affected certificates were revoked.
Participants
CCADB representative
Klid representative
Ml representative
Community commenter
External References
Similar Local Cases
SECOM: Non conformant SCT Encoding Due to SCT Modification by Cybertrust Japan (CTJ)
Telia: S/MIME Misissuance incorrect AIA id-ca-caIssuer http:URI
Disig: Certificates with invalid embedded SCT signature
Chunghwa Telecom: Issuance of certificate using keys previously reported as compromised
TunTrust: SSL OV mis-issuance against CP/CPS (Email attribute)
IdenTrust: Cross-signed root certificate mis-issuance
Microsec: CT Logging mistakes
Lawtrust: The S/MIME CA’s policy identifiers did not align with the CA/Browser Forum Requirements.