← GlobalSign nv-sa cases
Bugzilla #586414 Ca Certificate Compliance Incident

Verify GlobalSign's continued conformance to EV guidelines

RESOLVED FIXED GlobalSign nv-sa
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

This case concerns GlobalSign's issuance of certificates that incorrectly included RFC1918 IP addresses, which do not comply with Extended Validation (EV) guidelines. The issue was raised following concerns about the verification process for domain ownership. GlobalSign acknowledged the problem, updated their policies to prevent future occurrences, and committed to revoking and replacing the affected certificates. The CA has since confirmed that all incorrectly issued certificates have been revoked and replaced. The case is now resolved, with the consensus that GlobalSign has taken appropriate actions to address the compliance issue.

Model: gpt-4o-mini Generated: 2026-06-13 12:16 UTC Revised: 2026-06-16 18:33 UTC Confidence: 0.85 13 comments
Chronology
  1. Initial concerns raised about GlobalSign's certificate issuance practices.
  2. GlobalSign confirmed the revocation and replacement of affected certificates.
Thread Activity
  1. Kuix representative — Raised concerns about GlobalSign's verification of domain ownership for issued certificates.
  2. Mozilla representative — Noted that GlobalSign updated their issuance process to disallow RFC1918 IPs.
  3. GlobalSign nv-sa — Confirmed that affected certificates were revoked and replaced.
  4. Mozilla representative — Proposed closing the bug as resolved, fixed.
Participants
Community commenter
External References
Similar Local Cases
#1390997 RESOLVED Ca Certificate Compliance Incident Revocation Issue Opened 2017-08-16 · Closed 2023-02-22 · 90% similar
GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields
#1668007 RESOLVED Ca Certificate Compliance Opened 2020-09-29 · Closed 2023-02-22 · 83% similar
GlobalSign: Invalid stateOrProvinceName value
#1714968 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2021-06-07 · Closed 2023-02-22 · 83% similar
GlobalSign: Incorrect RegNumber-Org Type combination
#1393557 RESOLVED Self Reported Incident Incident Opened 2017-08-24 · Closed 2023-02-22 · 83% similar
GlobalSign: Non-BR-Compliant Certificate Issuance -- RSA key smaller than 2048 bits
#1690807 RESOLVED Incident Self Reported Incident Opened 2021-02-04 · Closed 2023-02-22 · 82% similar
GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31
#1393555 RESOLVED Self Reported Incident Incident Opened 2017-08-24 · Closed 2023-02-22 · 82% similar
GlobalSign: Non-BR-Compliant Certificate Issuance -- double-dots in dnsName
#1664328 RESOLVED Incident Self Reported Incident Opened 2020-09-10 · Closed 2023-02-22 · 82% similar
GlobalSign: SHA-256 hash algorithm used with ECC P-384 key
#1623356 RESOLVED Ca Certificate Compliance Opened 2020-03-18 · Closed 2023-02-22 · 80% similar
GlobalSign: Misissuance of QWAC Certificates

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action