← eMudhra Technologies Limited cases
Bugzilla #2057520
Ca Certificate Compliance
Incident
Self Reported Incident
Validation Issue
Problem Reporting Failure
eMudhra emSign PKI Services: Invalid Subject Locality/State Values
UNCONFIRMED
eMudhra Technologies Limited
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
eMudhra opened this bug to disclose a preliminary incident report about two Certificate Problem Reports concerning publicly trusted TLS server certificates issued by emSign. The reports alleged invalid characters in the Subject DN fields for subject:stateOrProvinceName and subject:localityName. emSign said it had opened an incident and was investigating the scope, root cause, and number of affected certificates. The report cites BR v2.2.8 Section 7.1.2 as the relevant policy. The thread states the source of the incident disclosure was a third-party report received by emSign on 2026-07-22.
Chronology
- emSign received third-party Certificate Problem Reports about invalid subject state/province and locality values in publicly trusted TLS server certificates.
- emSign opened a preliminary incident report and began investigating the scope, root cause, and affected certificates.
Thread Activity
- Emudhra representative — Naveen Kumar ML filed a preliminary incident report describing the two CPRs, the suspected subject DN validation issue, and the ongoing investigation.
Participants
Emudhra representative
External References
Similar Local Cases
GlobalSign: Unicode replacement character issue in Subject
eMudhra: Failure to respond to a Problem Report within 24 hours
eMudhra emSign PKI Services : Delayed Publication of Issuing CA Certificates in CCADB
eMudhra emSign PKI Services : OCSP Responder Time Inconsistency
Actalis: Undisclosed Subordinate CA Certificate
GlobalSign: SSL Certificates with US country code and invalid State/Prov
DigiCert: Invalid stateOrProvinceName
Microsoft PKI Services: Policy document bug