← Government of Hong Kong (SAR), Hongkong Post, Certizen cases
Bugzilla #1267332
Certificate Problem Report
Hongkong Post e-Cert CA 1 - 10 issuing certificates without subject alternative name extension
RESOLVED
Government of Hong Kong (SAR), Hongkong Post, Certizen
AI Summary
The Hongkong Post e-Cert CA 1 - 10 was found to be issuing certificates that lacked the required subject alternative name (SAN) extension, which is a violation of best practices. Although the CA ceased issuing SSL certificates using SHA-1 as of January 1, 2016, issues persisted with the certificates being issued. The case was resolved after the problematic certificates were added to OneCRL, ensuring compliance with the CA/Browser Forum's Baseline Requirements.
Chronology
- Initial report of missing SAN extension
- Discussion on adding certificates to OneCRL
- Case closed as resolved/fixed
Participants
Dana Keeler
Man Ho
Kathleen Wilson
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
DigiCert: ECCE 001 issuing certificates without subject alternative name extension
GlobalSign CloudSSL CA - SHA256 - G3 issued certificate without required extensions
GoDaddy: improperly encoded certificate issued by Go Daddy Secure Certification Authority
Izenpe: EV certificate with various issues
StartCom: public exponent is 1
Swisscom: certificates without DNS names in subjectAltName
LuxTrust: issuing 1024 bit certificates
DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension