← certSIGN cases
Bugzilla #2083774
Ca Certificate Compliance
Incident
Self Reported Incident
Linting Quality Issue
certSIGN self-reported incident: OCSP responder certificate subject attributes encoded out of order
UNCONFIRMED
certSIGN
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
certSIGN opened this bug to report a preliminary incident involving a delegated OCSP responder certificate, certSIGN Validation Service, issued by certSIGN Web CA G2. The report says the certificate encodes its subject attributes out of order. The incident was disclosed by certSIGN after an email was sent to R**********n@certsign.ro by Ryan Daurne. In the thread, certSIGN later stated that the incident is contained. The bug remains UNCONFIRMED in the Mozilla tracker, and no further remediation details are recorded in the provided comments.
Chronology
- certSIGN Validation Service delegated OCSP responder certificate was reported as encoding subject attributes out of order.
- Ryan Daurne emailed R**********n@certsign.ro about the incident.
- certSIGN stated that the incident is contained.
Thread Activity
- certSIGN — Opened a preliminary incident report describing the OCSP responder certificate subject-attribute ordering issue and citing the email report from Ryan Daurne.
- certSIGN — Stated that the incident is contained.
- certSIGN — Repeated that the incident is contained.
Participants
certSIGN
External References
Similar Local Cases
certSIGN: Missing localityName in an OV certificate
certSIGN: Missing the countryName attribute in the Subject DN of a test DV TLS certificate
certSIGN: Certificates with incorrect Subject attribute order
certSIGN: delay in updating a Bugzilla ticket
certSIGN: certificates with delayed SCT signature
SSL.com: Test websites for EV enabled Roots with non-EV certificates
GlobalSign: EV Test Certificates missing for 2 roots
eMudhra emSign PKI Services: TLS certificates missing certificate-type policy OID required by CP/CPS