← GlobalSign nv-sa cases
Bugzilla #1353833
Certificate Problem Report
GlobalSign: Incapsula issued a certificate for non-existing domain (testslsslfeb20.me)
RESOLVED
GlobalSign nv-sa
AI Summary
This case addresses a certificate issued by GlobalSign for a domain that was no longer under the control of its subscriber. The issue was reported in the Mozilla security policy forum, highlighting concerns about the vetting process for domain ownership. GlobalSign acknowledged the problem and is reviewing their procedures to ensure compliance with updated standards for certificate issuance.
Chronology
- Case reported in Mozilla forum
- Response provided regarding incident
- Further details on domain validation shared
Participants
Kathleen Wilson
Douglas Beattie
Gervase Markham
External References
Similar Local Cases
Bug in GlobalSign Certificate Centre not populating EKUs in 68 SSL certificates
Camerfirma: Startcom are issuing by proxy using Camerfirma
Camerfirma: Startcom are issuing by proxy using Camerfirma
GoDaddy: New GoDaddy incorrect issuance bug appears to be regression of 2010 issue
GlobalSign CloudSSL CA - SHA256 - G3 issued certificate without required extensions
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
DigiCert: no subject alternative name in Siemens certs
LuxTrust: issuing 1024 bit certificates