DocuSign France - Internal names certificates under a technically-constrained subordinate CA

RESOLVED DocuSign (OpenTrust/Keynectis)

AI Summary

This case involved a subordinate CA under DocuSign that failed to revoke non-compliant internal name certificates as required by CABF BR. After an audit, it was found that several certificates remained valid despite a prior agreement to revoke them. The CA subsequently revoked the offending certificates and made necessary technical changes to comply with the policy.

Model: gpt-4o-mini Generated: 2026-06-13 14:09 UTC Confidence: 0.95

Chronology

2016-11-30 Initial report of non-compliance and request for revocation.
2016-12-01 Two of the three problematic certificates were revoked.
2016-12-06 Technical changes made and new certificates generated.
2016-12-13 Case confirmed as resolved.

Participants

Erwann Abalea Kathleen Wilson

External References

Original Bugzilla Case crt.sh crt.sh crt.sh crt.sh crt.sh

Related Bugzilla IDs Mentioned

#1029147

Similar Local Cases

#1304089 RESOLVED Certificate Problem Report Opened 2016-09-20 · Closed 2022-11-14 · 46% similar

Bug in GlobalSign Certificate Centre not populating EKUs in 68 SSL certificates

AI Summary CA Owner

#1268225 RESOLVED Certificate Problem Report Opened 2016-04-27 · Closed 2022-11-14 · 46% similar

entrust: Invalid Teletext strings

AI Summary CA Owner

#1267332 RESOLVED Certificate Problem Report Opened 2016-04-25 · Closed 2022-11-14 · 46% similar

Hongkong Post e-Cert CA 1 - 10 issuing certificates without subject alternative name extension

AI Summary CA Owner

#1267049 RESOLVED Certificate Problem Report Opened 2016-04-24 · Closed 2023-02-22 · 46% similar

Izenpe: EV certificate with various issues

AI Summary CA Owner

#1266942 RESOLVED Certificate Problem Report Opened 2016-04-23 · Closed 2022-11-14 · 46% similar

StartCom: IV without localityName or stateOrProvinceName

AI Summary CA Owner

#1075952 RESOLVED Certificate Problem Report Opened 2014-10-01 · Closed 2022-11-14 · 46% similar

D-Trust: issuing 1024 bit certificates

AI Summary CA Owner

#723722 RESOLVED Certificate Problem Report Opened 2012-02-02 · Closed 2022-11-14 · 46% similar

EV SSL certificate (and OCSP response) for www.camerfirma.com fails to meet EV Guidelines

AI Summary CA Owner

#1548719 RESOLVED Certificate Problem Report Opened 2019-05-03 · Closed 2023-02-22 · 46% similar

DigiCert: Revoked intermediate certificates not in CRL

AI Summary CA Owner