← Amazon Trust Services cases
Bugzilla #1574594
Certificate Problem Report
Amazon Trust Services: Revoked Sample Certs - No SANs
RESOLVED
FIXED
Amazon Trust Services
AI Summary
Amazon Trust Services identified a problem with three revoked sample certificates that were issued without Subject Alternative Names (SANs) due to a transcription error in the certificate template. The issue was discovered during a routine certificate review on August 6, 2019, shortly after the certificates were issued and revoked on July 30, 2019. The CA has since corrected the template and implemented a new checklist tool to enforce peer review and ensure compliance in future certificate issuances. All affected certificates have been revoked, and the CA has ceased issuing certificates without SANs.
Chronology
- Sample certificates issued and immediately revoked.
- Issue discovered during certificate review.
- Transcription issue fixed and committed to template.
- Certificate issuance checklist moved to a tracking tool.
Participants
Trevoli (Amazon Trust Services)
Ryan Sleevi
Wayne Thayer
External References
Similar Local Cases
Amazon Trust Services: Test revoked certificates with invalid validity period
DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension
DigiCert: CAA Checking Issue
Amazon Trust Services: Revocation Time for Intermediate Certificates
TrustCor: Insufficient Serial Number Entropy
Amazon Trust Services / DigiCert: 404 error when fetching CRL
PKIoverheid: KPN Insufficient Serial Number Entropy
GoDaddy: Insufficient serial number entropy