← Sectigo cases
Bugzilla #2054098
Certificate Misissuance
Externally Reported Incident
Sectigo: Incorrect jurisdictionStateOrProvinceName attribute value in Code Signing certificate
ASSIGNED
Sectigo
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Sectigo opened a preliminary incident report after receiving a support request alleging an incorrect jurisdictionStateOrProvinceName value in a Code Signing certificate. The report states that Sectigo is investigating the root cause of the incident. The bug references Baseline Requirements for the Issuance and Management of Publicly-Trusted Code Signing Certificates version 3.11.0 section 7.1.4.2.4 (c). No certificate identifiers, revocation actions, or remediation steps are described in the provided thread content. The bug is currently in ASSIGNED status.
Chronology
- Sectigo received a support request alleging an incorrect jurisdictionStateOrProvinceName attribute value in a Code Signing certificate and opened a preliminary incident report.
Thread Activity
- Sectigo — Martijn Katerbarg reported that Sectigo received a support request about an incorrect jurisdictionStateOrProvinceName value in a Code Signing certificate and said Sectigo is investigating the root cause.
Participants
Sectigo
External References
Similar Local Cases
Sectigo: Missing character in subject:organizationName attribute value
Sectigo: "unauthorized" OCSP responses
Sectigo: potentially invalid organizational validation certificates
Asseco DS / Certum: Incorrect localityName
Actalis: CRL with duplicate serial number in revokedCertificates
Actalis: Undisclosed Subordinate CA Certificate
CFCA: OCSP Service return unauthorized responses
Microsec: Incorrect OCSP Delegated Responder Certificate