← certSIGN cases
Bugzilla #2083768
Ca Certificate Compliance
Self Reported Incident
Certificate Misissuance
Opened By Ca
certSIGN self-reported incident: missing localityName in an OV certificate
UNCONFIRMED
certSIGN
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
certSIGN opened this bug as a preliminary incident report about an OV certificate that was missing localityName (L=), which the report says was not conformant with the certSIGN Web CA G4 CPS. The report states that the incident disclosure came from an email sent to R**********n@certsign.ro by the Chrome Root Program on 2026-10-16. certSIGN later said the incident was contained and that issuance had been stopped on the specific profiles. The thread does not include any further remediation details or a closure decision.
Chronology
- Chrome Root Program emailed certSIGN about an OV certificate missing localityName.
- certSIGN filed a preliminary incident report for the missing localityName in an OV certificate.
- certSIGN said the incident was contained and issuance had been stopped on the specific profiles.
Thread Activity
- certSIGN — Reported a preliminary incident describing an OV certificate missing L= (localityName), citing the certSIGN Web CA G4 CPS and noting the disclosure source was an email from the Chrome Root Program.
- certSIGN — Stated that the incident is contained and issuance has been stopped on the specific profiles.
Participants
certSIGN
External References
Similar Local Cases
certSIGN: OCSP responder certificate encoded subject attributes out of order
certSIGN: Missing the countryName attribute in the Subject DN of a test DV TLS certificate
certSIGN: misissued an OV SSL certificate with no organizationName and localityName, instead of a DV SSL as requested by client
certSIGN: delay in updating a Bugzilla ticket
certSIGN: Certificates with incorrect Subject attribute order
GlobalSign: EV Test Certificates missing for 2 roots
eMudhra emSign PKI Services: TLS certificates missing certificate-type policy OID required by CP/CPS
certSIGN: Subscriber precertificate without Certificate Policies