eMudhra emSign PKI Services: Invalid Subject Locality/State Values
eMudhra opened this bug to disclose a certificate incident after receiving two external Certificate Problem Reports about publicly trusted OV and EV TLS server certificates issued by emSign. The reports described invalid values in the Subject DN fields for subject:stateOrProvinceName and subject:localityName. eMudhra investigated, scanned issued certificates, and reported 291 affected certificates in total. The company said all active affected certificates were revoked by 2026-07-27 and that no issued final certificate carrying the defect remained valid. The thread also records interim manual review controls and later permanent input-validation, linting, and self-audit enhancements. The latest status update on 2026-08-31 marked the remaining action items complete, and the bug remains ASSIGNED.
- eMudhra received two external CPRs about invalid Subject DN values in publicly trusted TLS server certificates.
- eMudhra opened a preliminary incident report and began investigating scope, root cause, and affected certificates.
- eMudhra completed revocation of the active affected certificates.
- eMudhra filed a full incident report stating that 291 certificates were affected and that no issued final certificate carrying the defect remained valid.
- eMudhra posted a status update marking the scan, revocation, and input-validation control items complete.
- eMudhra posted a final status update marking the remaining linting and self-audit action items complete.
- Emudhra representative — Naveen Kumar ML filed a preliminary incident report describing the two CPRs, the suspected Subject DN validation issue, and the ongoing investigation.
- Emudhra representative — Naveen Kumar ML posted the full incident report with the affected-certificate counts, revocation completion date, and interim manual review control.
- Emudhra representative — An attachment named Affected_Certificates.xlsx was added to the bug.
- Emudhra representative — Naveen Kumar ML posted a status update showing several remediation action items as complete and others ongoing.
- Emudhra representative — Naveen Kumar ML said the team was still working on the action item and would provide an update.
- Emudhra representative — Naveen Kumar ML repeated that the team was still working on the action item and provided an updated action-item table.
- Emudhra representative — Naveen Kumar ML posted a status update showing all listed action items completed.