← eMudhra Technologies Limited cases
Bugzilla #2082782
Ca Certificate Compliance
Incident
Certificate Misissuance
Policy Document Issue
Opened By Ca
eMudhra preliminary incident report: TLS certificates missing required certificate-type policy OID
UNCONFIRMED
eMudhra Technologies Limited
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
eMudhra opened this bug as a preliminary incident report about TLS server certificates it issued without the emSign certificate-type policy identifier required by its CP/CPS. The report says the missing policy OID applies to DV, OV, and EV certificates and cites the emSign SSL/TLS CP/CPS and TLS Baseline Requirements as relevant policies. The incident disclosure states that the source of the incident was a third-party report. The thread provided does not include any remediation, closure, or follow-up comments beyond the initial disclosure.
Chronology
- eMudhra issued TLS server certificates missing the emSign certificate-type policy identifier required for DV, OV, and EV certificates.
Thread Activity
- Emudhra representative — Opened a preliminary incident report stating that eMudhra issued TLS server certificates without the required emSign certificate-type policy identifier and noted that the incident was reported by a third party.
Participants
Emudhra representative
External References
Similar Local Cases
eMudhra emSign PKI Services: TLS certificates exceed CP/CPS maximum validity period by one second
eMudhra emSign PKI Services: Missing EKU Extension in Subordinate CA Certificates
eMudhra emSign PKI Services: InCommon RSA IGTF Server CA 4 — certificates issued with key sizes not permitted by CPS
eMudhra emSign PKI Services: Invalid Subject Locality/State Values
eMudhra emSign PKI Services: Test Website TLS Certificates Issued Against CP/CPS.
Private key compromise of eMudhra Intermediate Certificates
eMudhra emSign PKI Services: Policy Document Inconsistency
SwissSign: CLR max validity period exceeded