CA/Closed Incidents: Difference between revisions
< CA
Jump to navigation
Jump to search
(Separate out delayed revocation incidents and move to a lower table.) |
(Sort by summary (assigned-to CA) and modification date) |
||
| Line 17: | Line 17: | ||
"o3": "nowordssubstr", | "o3": "nowordssubstr", | ||
"v3": "delayed-revocation", | "v3": "delayed-revocation", | ||
"include_fields": | "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time", | ||
"order": "short_desc ASC, delta_ts DESC" | |||
} | } | ||
</bugzilla> | </bugzilla> | ||
| Line 35: | Line 36: | ||
"o3": "allwordssubstr", | "o3": "allwordssubstr", | ||
"v3": "delayed-revocation", | "v3": "delayed-revocation", | ||
"include_fields": | "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time", | ||
"order": "short_desc ASC, delta_ts DESC" | |||
} | } | ||
</bugzilla> | </bugzilla> | ||
Revision as of 19:38, 24 May 2021
Closed CA Compliance Bugs
A historical view of past overdue audit statements may be found here.
Below is a historical view of past CA compliance bugs. These bugs may have been valid and remedied by the CA, or may have been deemed invalid and closed as unnecessary.
All Other Issues
| Summary | ID | Status | Assigned to | Whiteboard | Last change time |
|---|---|---|---|---|---|
| [meta] Bug for Tracking BR Compliance Issues | 1029147 | RESOLVED | Kathleen Wilson | [ca-compliance] -- tracking bug for BR Compliance issues | 2022-11-14T22:22:57Z |
| ACCV: Certificates issued with cRLIssuer in CDP extension | 1884532 | RESOLVED | Jose Amador | [ca-compliance] [ov-misissuance] | 2024-07-11T15:02:17Z |
| ACCV: Certificates issued with Policy qualifiers other than id-qt-cps | 1889567 | RESOLVED | Jose Amador | [ca-compliance] [ev-misissuance] | 2024-08-28T21:35:12Z |
| ACCV: Delayed response to CPR | 1886785 | RESOLVED | Jose Amador | [ca-compliance] [policy-failure] | 2024-07-11T15:01:59Z |
| ACCV: Delayed revocation of TLS certificates affected by bug #1884532 | 1886788 | RESOLVED | Jose Amador | [ca-compliance] [leaf-revocation-delay] | 2024-06-01T14:06:45Z |
| ACCV: Insufficient serial number entropy | 1536213 | RESOLVED | Jose Amador | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:58Z |
| ACCV: Late Audit Statement | 1507862 | RESOLVED | Jose Amador | [ca-compliance] [audit-delay] | 2023-02-22T18:18:59Z |
| ACCV: Missing BR Self Assessment | 1458042 | RESOLVED | Jose Amador | [ca-compliance] [disclosure-failure] | 2023-02-22T18:19:00Z |
| Actalis: Certificates issued with invalid RDN order | 1883731 | RESOLVED | Marco Menonna | [ca-compliance] [ev-misissuance] | 2024-06-28T19:01:00Z |
| Actalis: Certificates issued with validity period greater than 398 days | 1826713 | RESOLVED | Adriano Santoni | [ca-compliance] [ov-misissuance] | 2023-07-20T23:24:14Z |
| Actalis: Certs issued with same issuer and serial number | 1405817 | RESOLVED | Adriano Santoni | [ca-compliance] [ca-misissuance] | 2023-02-22T18:11:52Z |
| Actalis: CRL distribution point with ldap scheme | 1906690 | RESOLVED | Marco Menonna | [ca-compliance] [ov-misissuance] | 2025-03-18T00:54:38Z |
| Actalis: CRL with duplicate serial number in revokedCertificates | 1943379 | RESOLVED | Marco Menonna | [ca-compliance] [crl-failure] | 2025-05-08T17:50:46Z |
| Actalis: Delayed revocation of non-BR-compliant CA Certificate within 7 days | 1718554 | RESOLVED | Adriano Santoni | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:11:53Z |
| Actalis: delayed revocation related to inaccurate value in stateOrProvinceName | 1670861 | RESOLVED | Adriano Santoni | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:11:54Z |
| Actalis: Failure to revoke certs within the BR required timeframe | 1572638 | RESOLVED | Giorgio Girelli | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:18:02Z |
| Actalis: Failure to revoke within 7 days: OCSP EKU issue | 1651651 | RESOLVED | Adriano Santoni | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:11:55Z |
| Actalis: inaccurate value in stateOrProvinceName | 1648997 | RESOLVED | Adriano Santoni | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:11:56Z |
| Actalis: Incorrect OCSP Delegated Responder Certificate | 1649961 | RESOLVED | Adriano Santoni | [ca-compliance] [ocsp-failure] | 2023-02-22T18:11:57Z |
| Actalis: Insufficient serial number entropy | 1534295 | RESOLVED | Adriano Santoni | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:11:58Z |
| Actalis: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy | 1586787 | RESOLVED | Giorgio Girelli | [ca-compliance] [ca-misissuance] | 2023-02-22T18:18:03Z |
| Actalis: Issuance of intermediates after 2020-08-20 that do not comply with Mozilla Policy and the Baseline Requirements | 1717357 | RESOLVED | Adriano Santoni | [ca-compliance] [ca-misissuance] | 2023-02-22T18:12:00Z |
| Actalis: Non BR Compliant OCSP Responder | 1523680 | RESOLVED | Adriano Santoni | [ca-compliance] [ocsp-failure] | 2023-02-22T18:12:01Z |
| Actalis: Non-BR-Compliant Certificate Issuance | 1390974 | RESOLVED | Adriano Santoni | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] [disclosure-failure] | 2023-02-22T18:12:02Z |
| Actalis: pre-certificates with “certificateHold” as the revocation reason | 1824319 | RESOLVED | Adriano Santoni | [ca-compliance] [crl-failure] | 2023-07-20T23:23:59Z |
| Actalis: revocation delay for certificates issued with invalid RDN Order | 1887941 | RESOLVED | Marco Menonna | [ca-compliance] [leaf-revocation-delay] | 2024-06-01T14:07:09Z |
| Actalis: two CAs with the same CRLDP | 1949203 | RESOLVED | Marco Menonna | [ca-compliance] [crl-failure] [external] | 2025-04-03T01:35:21Z |
| Actalis: Use of CRLReason Code in Certificate Revocation | 1914419 | RESOLVED | Marco Menonna | [ca-compliance] [crl-failure] | 2025-02-04T19:22:55Z |
| AGCE: Non-Compliant VPN Certificate Issuance | 1882256 | RESOLVED | ance.certification.info | [ca-compliance] [ov-misissuance] | 2024-08-28T21:31:32Z |
| Amazon Trust Services / DigiCert: 404 error when fetching CRL | 1800405 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [crl-failure] | 2023-02-22T18:27:34Z |
| Amazon Trust Services: ALV Errors | 1713668 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [audit-failure] | 2023-02-22T18:27:35Z |
| Amazon Trust Services: CAA Misissuances | 1398428 | RESOLVED | Peter Bowen | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:33Z |
| Amazon Trust Services: CP/CPS does not specify key compromise methods | 1713976 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [policy-failure] | 2023-02-22T18:27:36Z |
| Amazon Trust Services: CRL not DER-encoded | 1914893 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [crl-failure] [external] | 2024-09-18T20:11:56Z |
| Amazon Trust Services: Delayed Revocation of Subordinate CA | 1743943 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [ca-revocation-delay] | 2023-06-02T15:24:38Z |
| Amazon Trust Services: Failure to comply with RFC 5280 | 1521623 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] | 2024-05-09T20:56:24Z |
| Amazon Trust Services: Forbidden Domain Validation Method 3.2.2.4.6 | 1713978 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [policy-failure] | 2023-02-22T18:27:37Z |
| Amazon Trust Services: Misissuance of Subordinate Per CPS | 1743935 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [ca-misissuance] | 2023-02-22T18:27:38Z |
| Amazon Trust Services: Missing CAA Check For Test Website Certificates | 1746945 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:27:39Z |
| Amazon Trust Services: No Space In Private Organization | 1569266 | RESOLVED | Dave Blunt | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:24Z |
| Amazon Trust Services: Overdue audit statements for intermediate certificates | 1757615 | RESOLVED | Ben Wilson | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:41:17Z |
| Amazon Trust Services: Revocation Time for Intermediate Certificates | 1719920 | RESOLVED | Heather (Amazon Trust Services) | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:28:07Z |
| Amazon Trust Services: Revoked Sample Certs - No SANs | 1574594 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:41Z |
| Amazon Trust Services: Test revoked certificates with invalid validity period | 1525710 | RESOLVED | Trevoli (Amazon Trust Services) | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:42Z |
| ANF AC: 2023 Audit Report Finding | 1837386 | RESOLVED | Yulier Nuñez | [ca-compliance] [audit-finding] | 2023-10-12T10:24:44Z |
| ANF: Missing log retention period in Terms and Conditions v1.9 | 1969839 | RESOLVED | Pablo Díaz | [ca-compliance] [policy-failure] | 2025-06-04T10:57:28Z |
| Apple: CRL issuance frequency deviates from CPS in some cases | 1772644 | RESOLVED | Apple CA | [ca-compliance] [crl-failure] [policy-failure] | 2023-02-22T18:15:34Z |
| Apple: Empty SingleExtension in OCSP responses | 1669618 | RESOLVED | Apple CA | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:37Z |
| Apple: EV Certificate Approver Authorization | 1659316 | RESOLVED | Apple CA | [ca-compliance] [ev-misissuance] | 2023-02-22T18:15:37Z |
| Apple: EV TLS pre-certificates issued without EKU extension | 1777757 | RESOLVED | Apple CA | [ca-compliance] [ev-misissuance] | 2023-02-22T18:15:39Z |
| Apple: Intermediate CA certificates omitted from audit statement | 1724528 | RESOLVED | Apple CA | [ca-compliance] [audit-failure] | 2024-06-30T20:04:00Z |
| Apple: OCSP availability 2020-11-12 | 1677234 | RESOLVED | Apple CA | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:40Z |
| Apple: OCSP responders return ‘unknown’ for valid S/MIME and TLS certificates | 1771398 | RESOLVED | Apple CA | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:41Z |
| Apple: OCSP responders return responses with incorrect issuer | 1588001 | RESOLVED | Apple CA | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:42Z |
| Apple: Patch Management | 1598829 | RESOLVED | Apple CA | [ca-compliance] [uncategorized] | 2023-02-22T18:15:43Z |
| Apple: Public Key Reuse | 1955365 | RESOLVED | Apple CA | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2025-05-19T14:26:13Z |
| Apple: Revocation Delay for TLS certificates issued outside the TTL of the CAA record | 1843676 | RESOLVED | Apple CA | [ca-compliance] [leaf-revocation-delay] | 2023-09-22T22:43:52Z |
| Apple: Test website certificates expired | 1730291 | RESOLVED | Apple CA | [ca-compliance] [uncategorized] | 2024-06-30T19:11:36Z |
| Apple: TLS certificates issued outside the TTL of the CAA record | 1841534 | RESOLVED | Apple CA | [ca-compliance] [ov-misissuance] [ev-misissuance] Next update 2023-08-15 | 2023-08-30T15:41:47Z |
| Asseco DS / Certum: TLS EV certificates with incorrect Subject attribute order | 1865080 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ev-misissuance] | 2024-01-04T20:53:40Z |
| Asseco DS / Certum: CAA Mis-Issuance on CNAME pointing directly to restrictive CAA record | 1409766 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [dv-misissuance] | 2023-02-22T18:28:38Z |
| Asseco DS / Certum: CAA mis-issuance on critical flag and unknown CAA tag | 1409764 | RESOLVED | Arkadiusz Ławniczak | [ca-compliance] [dv-misissuance] | 2023-02-22T18:12:45Z |
| Asseco DS / Certum: CAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN | 1420860 | RESOLVED | Arkadiusz Ławniczak | [ca-compliance] [dv-misissuance] | 2023-02-22T18:12:46Z |
| Asseco DS / Certum: commonName not from subjectAltName entries | 1550575 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:39Z |
| Asseco DS / Certum: Corrupted certificates | 1511459 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [dv-misissuance] [crl-failure] | 2023-02-22T18:28:40Z |
| Asseco DS / Certum: CP/CPS, Revocation Requests Mechanism, Certificate Problem Report, CRL and OCSP disruption | 1909203 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [policy-failure] | 2025-05-13T22:48:40Z |
| Asseco DS / Certum: CPS does not refer to BR domain validation methods | 1717034 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [policy-failure] | 2023-02-22T18:12:15Z |
| Asseco DS / Certum: CRL non-conformance with the TLS BRs | 1888689 | RESOLVED | Kateryna Aleksieieva | [ca-compliance] [crl-failure] [external] | 2024-10-02T21:56:18Z |
| Asseco DS / Certum: Cross-certificate not included in 2024 S/MIME Audit statement | 1904494 | RESOLVED | Kateryna Aleksieieva | [ca-compliance] [audit-failure] | 2024-09-04T16:05:55Z |
| Asseco DS / Certum: Cross-certificate with wrong policy identifier | 1823040 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ca-misissuance] Next update 2023-04-28 | 2023-05-19T20:59:32Z |
| Asseco DS / Certum: Cross-Signed non-EV-audited root with an EV-enabled root | 1815355 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ca-misissuance] | 2023-08-16T20:34:36Z |
| Asseco DS / Certum: Delayed revocation of EV certificates | 1871393 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [leaf-revocation-delay] | 2024-05-09T20:57:24Z |
| Asseco DS / Certum: Delayed revocation of SHECA cross certificate | 1825734 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ca-revocation-delay] Next update 2023-04-28 | 2023-06-01T16:09:16Z |
| Asseco DS / Certum: Delayed revocation of SSL.COM cross certificate | 1826363 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ca-revocation-delay] | 2023-06-08T16:43:53Z |
| Asseco DS / Certum: EV certificate mis-issue | 1451228 | RESOLVED | Arkadiusz Ławniczak | [ca-compliance] [ev-misissuance] | 2023-02-22T18:12:47Z |
| Asseco DS / Certum: EV Certificates issued with wrong Business Category | 1600301 | RESOLVED | Aleksandra Kapinos | [ca-compliance] [ev-misissuance] | 2023-02-22T18:12:13Z |
| Asseco DS / Certum: Failure to provide a preliminary report within 24 hours. | 1667684 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [disclosure-failure] | 2023-02-22T18:28:41Z |
| Asseco DS / Certum: Failure to revoke intermediate certificates within the BR time period | 1600158 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:28:42Z |
| Asseco DS / Certum: Failure to revoke within 5 days | 1668523 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:12:21Z |
| Asseco DS / Certum: Failure to Update Policy Documents within 365 Days | 1935393 | RESOLVED | Kateryna Aleksieieva | [ca-compliance] [policy-failure] | 2025-01-29T04:04:55Z |
| Asseco DS / Certum: Forward dating certificates (notBefore in the future) | 1718680 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [uncategorized] | 2023-02-22T18:12:16Z |
| Asseco DS / Certum: inconsistent disclosure of externally-operated intermediate | 1567062 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [disclosure-failure] | 2023-02-22T18:28:43Z |
| Asseco DS / Certum: Incorrect localityName | 1710206 | RESOLVED | Aleksandra Kurosz | [ca-compliance] | 2022-11-14T22:22:57Z |
| Asseco DS / Certum: Incorrect localityName | 1711208 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ev-misissuance] | 2023-02-22T18:12:18Z |
| Asseco DS / Certum: Incorrect OCSP response encoding | 1639502 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ocsp-failure] | 2023-02-22T18:28:44Z |
| Asseco DS / Certum: Intermediate CA certificates not listed in audit report | 1598277 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [audit-failure] | 2024-06-30T20:04:30Z |
| Asseco DS / Certum: Invalid dnsNames | 1524195 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:45Z |
| Asseco DS / Certum: Invalid stateOrProvinceName field | 1667986 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:19Z |
| Asseco DS / Certum: Invalid stateOrProvinceName field (recurrent incident) | 1709392 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:20Z |
| Asseco DS / Certum: Invalid value in SAN dNSName | 1611458 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:46Z |
| Asseco DS / Certum: IP in dnsName | 1524878 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:47Z |
| Asseco DS / Certum: non-audited intermediate certificate | 1579299 | RESOLVED | Aleksandra Kapinos | [ca-compliance] | 2023-02-22T18:12:14Z |
| Asseco DS / Certum: Non-BR-Compliant Issuance - Debian Weak Keys | 1435770 | RESOLVED | Arkadiusz Ławniczak | [ca-compliance] [dv-misissuance] [leaf-revocation-delay] | 2023-02-22T18:12:48Z |
| Asseco DS / Certum: Organization Identifier and Country field discrepancies | 1917571 | RESOLVED | Kateryna Aleksieieva | [ca-compliance] [smime-misissuance] | 2024-11-06T17:13:18Z |
| Asseco DS / Certum: Overdue Audit Statements 2019 | 1566586 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [audit-failure] | 2023-02-22T18:28:49Z |
| Asseco DS / Certum: S/MIME certificates with error in subjectAlternativeName | 1879845 | RESOLVED | Kateryna Aleksieieva | [ca-compliance] [smime-misissuance] | 2024-10-02T21:56:44Z |
| Asseco DS / Certum: SMIME certificates with wrong organizationIdentifier | 1853663 | RESOLVED | Aleksandra Kurosz | [ca-compliance] [smime-misissuance] Next update 2-Oct-2023 | 2024-05-09T20:57:33Z |
| Asseco DS / Certum: Subordinate certificates with sequential serial number | 1832093 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ca-misissuance] | 2023-06-02T15:25:04Z |
| Asseco DS / Certum: Unallowed key usage for EC public key (Key Encipherment) | 1495518 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:50Z |
| Asseco DS / Certum: Use of forbidden subjectPublicKeyInfo algorithm | 1518560 | RESOLVED | Wojciech Trapczyński | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:51Z |
| Atos: Incorrect OCSP Delegated Responder Certificate | 1649963 | RESOLVED | u636358 | [ca-compliance] [ocsp-failure] | 2023-02-22T18:27:44Z |
| Atos: Insufficient Serial Number Entropy | 1540961 | RESOLVED | u636358 | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:45Z |
| Atos: Tracking bug for possible audit delays | 1626355 | RESOLVED | u636358 | [ca-compliance] [audit-failure] [covid-19] | 2023-02-22T18:27:46Z |
| Buypass: Delayed revocation of TLS certificates | 1872738 | RESOLVED | Mads Henriksveen | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-14T17:04:21Z |
| Buypass: Domain validation method using externally operated DNS tools | 1839305 | RESOLVED | Mads Henriksveen | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2024-06-30T03:26:45Z |
| Buypass: Domain validation method using not allowed domain contact | 1838421 | RESOLVED | Mads Henriksveen | [ca-compliance] [dv-misissuance] | 2024-06-30T03:27:01Z |
| Buypass: Failure to revoke PSD2 QWACs within mandated 5 days | 1628292 | RESOLVED | Mads Henriksveen | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:21:42Z |
| Buypass: Findings in 2023 audit | 1875440 | RESOLVED | Mads Henriksveen | [ca-compliance] [audit-finding] | 2024-03-15T16:07:21Z |
| Buypass: Illegal Business Category in a PSD2 QWAC | 1632632 | RESOLVED | Mads Henriksveen | [ca-compliance] [ev-misissuance] | 2023-02-22T18:21:43Z |
| Buypass: Insufficient Serial Number Entropy | 1539307 | RESOLVED | Mads Henriksveen | [ca-compliance] [ca-misissuance] | 2023-02-22T18:21:44Z |
| Buypass: Intermediate certificates not listed in audit reports | 1595113 | RESOLVED | Mads Henriksveen | [ca-compliance] [audit-failure] | 2023-02-22T18:21:45Z |
| Buypass: intermediate certificates not revoked within BR time period | 1598319 | RESOLVED | Mads Henriksveen | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:21:46Z |
| Buypass: Missing NCA identifier in cabfOrganizationIdentifier in PSD2 QWACs | 1626078 | RESOLVED | Mads Henriksveen | [ca-compliance] [ev-misissuance] | 2023-02-22T18:21:47Z |
| Buypass: PSD2 QWAC with RSA modulus not divisible by 8 | 1654216 | RESOLVED | Mads Henriksveen | [ca-compliance] [ev-misissuance] | 2023-02-22T18:21:49Z |
| Buypass: TLS certificates not revoked within 5 days | 1865368 | RESOLVED | Mads Henriksveen | [ca-compliance] [leaf-revocation-delay] | 2024-04-06T02:31:06Z |
| Buypass: TLS certificates with incorrect Subject attribute order | 1864204 | RESOLVED | Mads Henriksveen | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2024-05-10T20:23:48Z |
| Buypass: Using an external DNS Resolver for DNS lookups | 1872371 | RESOLVED | Mads Henriksveen | [ca-compliance] [ov-misissuance] | 2024-08-07T14:01:52Z |
| Camerfirma: audit gap | 1583470 | RESOLVED | Ana Lopes | [ca-compliance] [audit-failure] | 2023-02-22T18:12:22Z |
| Camerfirma: BR revocation period exceeded | 1624658 | RESOLVED | Ana Lopes | [ca-compliance] [leaf-revocation-delay] [covid-19] | 2023-02-22T18:12:24Z |
| Camerfirma: certificate for unregistered domain cuatis.net | 1672423 | RESOLVED | Ana Lopes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:25Z |
| Camerfirma: Certificate issued with 3-year lifespan, unknown policy | 1686524 | RESOLVED | Eusebio Herrera | [ca-compliance] [uncategorized] | 2023-02-22T18:17:20Z |
| Camerfirma: certificate with an incorrect OrganizationName | 1680083 | RESOLVED | Eusebio Herrera | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:21Z |
| Camerfirma: Certificates without CABForum OV Reserved Policy Identifier | 1685557 | RESOLVED | Ana Lopes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:26Z |
| Camerfirma: Certs issued with same issuer and serial number | 1405815 | RESOLVED | Ramiro Muñoz Muñoz | [ca-compliance] [ca-misissuance] | 2023-02-22T18:24:38Z |
| Camerfirma: certs with duplicate SANs and without localityName or stateOrProvinceName | 1357067 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:09Z |
| Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant | 1688215 | RESOLVED | Ana Lopes | [ca-compliance] [policy-failure] | 2023-02-22T18:12:27Z |
| Camerfirma: Decision not to revoke certificates with authorityKeyIdentifier that violates Mozilla Policy | 1609828 | RESOLVED | Juan Angel Martin | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:22:11Z |
| Camerfirma: Delayed revocations of certificates issued by old CAs with an RSA modulus size of 2047 bits | 1692535 | RESOLVED | Ben Wilson | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:15:04Z |
| Camerfirma: Delayed revocations related to certificates without CABForum OV Reserved Policy Identifier | 1686966 | RESOLVED | Ana Lopes | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:12:28Z |
| Camerfirma: Delayed revocations related to Invalid authorityKeyIdentifier - recurrent incident | 1647099 | RESOLVED | Ana Lopes | [ca-compliance] [leaf-revocation-delay] [covid-19] | 2023-02-22T18:12:29Z |
| Camerfirma: Delayed revocations related to Invalid stateOrProvinceName field | 1668331 | RESOLVED | Juan Angel Martin | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:22:13Z |
| Camerfirma: EV Certificates issued with wrong Business Category | 1600114 | RESOLVED | Ana Lopes | [ca-compliance] [ev-misissuance] | 2023-02-22T18:12:30Z |
| Camerfirma: Failure to abide by Section 8 of Mozilla Policy: Unauthorized, improperly disclosed Subordinate CA | 1672029 | RESOLVED | Ana Lopes | [ca-compliance] [disclosure-failure] | 2023-02-22T18:12:31Z |
| Camerfirma: failure to revoke underscores | 1524871 | RESOLVED | Eusebio Herrera | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:23Z |
| Camerfirma: Failure to revoke within 7 days: OCSP EKU issue | 1652603 | RESOLVED | Eusebio Herrera | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:17:24Z |
| Camerfirma: Govern d'Andorra Audit Delay | 1704140 | RESOLVED | Ana Lopes | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:42:12Z |
| Camerfirma: Govern d'Andorra audits | 1575530 | RESOLVED | Juan Angel Martin | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:22:14Z |
| Camerfirma: Incorrect disclosure of Intesa Sanpaolo sub-CA | 1672562 | RESOLVED | Ana Lopes | [ca-compliance] [disclosure-failure] | 2023-02-22T18:12:33Z |
| Camerfirma: Incorrect OCSP Delegated Responder Certificate | 1649944 | RESOLVED | Eusebio Herrera | [ca-compliance] [ca-misissuance] | 2023-02-22T18:17:25Z |
| Camerfirma: Infocert misissued certificates | 1556806 | RESOLVED | Eusebio Herrera | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:26Z |
| Camerfirma: Intesa Sanpaolo misissued certificates | 1557085 | RESOLVED | Eusebio Herrera | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:27Z |
| Camerfirma: Invalid authorityKeyIdentifier - recurrent incident | 1623384 | RESOLVED | Ana Lopes | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:12:34Z |
| Camerfirma: Invalid authorityKeyIdentifier - recurrent incident | 1623389 | RESOLVED | Wayne Thayer | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:11Z |
| Camerfirma: Invalid authorityKeyIdentifier, violating Mozilla Policy and RFC 5280 | 1586860 | RESOLVED | Juan Angel Martin | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:22:15Z |
| Camerfirma: Invalid country field for Camerfirma root CA certificates | 1468000 | VERIFIED | Ben Wilson | [ca-compliance] | 2024-05-09T23:23:42Z |
| Camerfirma: Invalid stateOrProvinceName field | 1667430 | RESOLVED | Ana Lopes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:35Z |
| Camerfirma: Missing audit for Intermediate certificate | 1455147 | RESOLVED | Juan Angel Martin | [ca-compliance] [audit-failure] | 2023-02-22T18:22:16Z |
| Camerfirma: MULTICERT certificates with a validity period greater than 825 days | 1509002 | RESOLVED | Eusebio Herrera | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:28Z |
| Camerfirma: MULTICERT Misissuance and missing audits | 1502957 | RESOLVED | Juan Angel Martin | [ca-compliance] [ov-misissuance] [audit-failure] | 2023-02-22T18:22:17Z |
| Camerfirma: MULTICERT organizationName Too Long | 1481862 | RESOLVED | Juan Angel Martin | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:18Z |
| Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy | 1534429 | RESOLVED | ca.forum | [ca-compliance] [ov-misissuance] | 2023-02-22T18:15:12Z |
| Camerfirma: No disclosure of verification sources | 1688382 | RESOLVED | Ana Lopes | [ca-compliance] [policy-failure] | 2023-02-22T18:12:36Z |
| Camerfirma: Non-BR-Compliant Certificate Issuance | 1390977 | RESOLVED | Ramiro Muñoz Muñoz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:39Z |
| Camerfirma: Non-BR-Compliant Issuance - DNSName is empty | 1443857 | RESOLVED | Juan Angel Martin | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:19Z |
| Camerfirma: Non-BR-Compliant Issuance - Non-printable characters in OU field | 1431164 | RESOLVED | Juan Angel Martin | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:20Z |
| Camerfirma: Non-BR-Compliant OCSP Responders | 1426233 | RESOLVED | Ramiro Muñoz Muñoz | [ca-compliance] [ocsp-failure] | 2023-02-22T18:24:40Z |
| Camerfirma: Old CAs with an RSA modulus size of 2047 bits | 1692533 | RESOLVED | Ana Lopes | [ca-compliance] [ca-misissuance] | 2023-02-22T18:12:37Z |
| Camerfirma: Outdated audit statements for intermediate certs | 1549861 | RESOLVED | Eusebio Herrera | [ca-compliance] [audit-failure] | 2023-02-22T18:17:30Z |
| Camerfirma: Potential Mis-Issuance based on CAA records | 1420871 | RESOLVED | Ramiro Muñoz Muñoz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:41Z |
| Camerfirma: Qualified Audit Statements | 1478933 | RESOLVED | Juan Angel Martin | [ca-compliance] [audit-finding] | 2023-02-22T18:22:21Z |
| Camerfirma: suspicious certificate for com.com | 1672409 | RESOLVED | Ana Lopes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:38Z |
| Camerfirma: Unrevocation of MULTICERT SSL Certification Authority 001 certificate | 1532333 | RESOLVED | Eusebio Herrera | [ca-compliance] [crl-failure] | 2023-02-22T18:17:31Z |
| Certainly: CRL Issuing Distribution Point Mismatch in CCADB | 1819422 | RESOLVED | Wayne Thayer | [ca-compliance] [disclosure-failure] | 2023-03-24T16:11:21Z |
| Certainly: Early CRL Entry Removal | 1954889 | RESOLVED | Wayne Thayer | [ca-compliance] [crl-failure] | 2025-03-28T04:35:29Z |
| Certainly: Intermediate certificates with wrong time encoding | 1777270 | RESOLVED | Ben Wilson | [ca-compliance] [ca-misissuance] | 2023-02-22T18:15:05Z |
| Certainly: Root CRL validity period exceeds maximum by one second | 1732745 | RESOLVED | Wayne Thayer | [ca-compliance] [crl-failure] | 2023-02-22T18:28:12Z |
| Certainly: Serving Bad OCSP Responses | 1798053 | RESOLVED | Wayne Thayer | [ca-compliance] [ocsp-failure] | 2023-02-22T18:28:13Z |
| Certainly: Serving Expired OCSP Responses | 1771238 | RESOLVED | Wayne Thayer | [ca-compliance] [ocsp-failure] | 2023-02-22T18:28:14Z |
| Certainly: Serving invalid or incomplete CRLs | 1900129 | RESOLVED | Wayne Thayer | [ca-compliance] [crl-failure] | 2024-06-28T19:01:22Z |
| Certainly: TLS Using ALPN TLS Version and OID | 1752452 | RESOLVED | Wayne Thayer | [ca-compliance] [dv-misissuance] | 2023-02-22T18:28:15Z |
| Certicamara: Failure to respond to September 2018 CA Survey | 1498409 | RESOLVED | Leonardo Maldonado | [ca-compliance] [disclosure-failure] | 2023-03-20T15:01:11Z |
| Certicamara: Undisclosed Intermediate certificates | 1455128 | RESOLVED | Leonardo Maldonado | [ca-compliance] [disclosure-failure] | 2023-02-22T18:28:09Z |
| Certigna: ARL without reasoncode for recent revoked CA certificates | 1900654 | RESOLVED | Josselin Allemandou | [ca-compliance] [crl-failure] [external] | 2024-08-28T21:37:31Z |
| Certigna: Certificate issued with validity period greater than 398-days | 1774418 | RESOLVED | Josselin Allemandou | [ca-compliance] [ov-misissuance] | 2023-04-19T22:27:37Z |
| Certigna: certificates issued with 2 SCT | 1709896 | RESOLVED | Josselin Allemandou | [ca-compliance] | 2024-05-09T21:00:11Z |
| Certigna: Findings in 2024 ETSI Audit – Audit Incident Report | 1907833 | RESOLVED | Josselin Allemandou | [ca-compliance] [audit-finding] | 2024-08-28T21:37:11Z |
| Certigna: Issuance without respecting CAA records | 1485413 | RESOLVED | Josselin Allemandou | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:43Z |
| Certigna: Precertificate with a validity period greater than 398-days | 1774171 | RESOLVED | Ben Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:15:06Z |
| Certigna: Revocation delay for TLS certificates with basic constraint not marked as critical | 1886442 | RESOLVED | Josselin Allemandou | [ca-compliance] [leaf-revocation-delay] | 2024-06-01T14:07:36Z |
| Certigna: TLS certificates with Basic constraint non-critical | 1883416 | RESOLVED | Josselin Allemandou | [ca-compliance] [ov-misissuance] | 2024-08-28T21:37:52Z |
| Certinomis / Docapost: Failure to respond to January 2018 survey | 1439126 | RESOLVED | Franck Leroy | [ca-compliance] [disclosure-failure] | 2023-02-22T18:17:50Z |
| Certinomis / Docapost: Non-BR-Compliant OCSP Responders | 1425998 | RESOLVED | Franck Leroy | [ca-compliance] [ocsp-failure] | 2023-02-22T18:17:51Z |
| Certinomis: 174 certificates with unknown OCSP status | 1551390 | RESOLVED | François CHASSERY | [ca-compliance] [ocsp-failure] [ov-misissuance] | 2023-02-22T18:17:52Z |
| Certinomis: certificates for an unregistered domain, with unknown OCSP status | 1544933 | RESOLVED | François CHASSERY | [ca-compliance] [ocsp-failure] [ov-misissuance] | 2023-02-22T18:17:53Z |
| Certinomis: certificates with invalid DNS SAN | 1551357 | RESOLVED | François CHASSERY | [ca-compliance] [ocsp-failure] [ov-misissuance] | 2023-02-22T18:17:55Z |
| Certinomis: certificates with space in dNSName SAN | 1539531 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:52Z |
| Certinomis: Cross-signing of StartCom intermediate certs, and delay in reporting it in CCADB | 1386891 | RESOLVED | Franck Leroy | [ca-compliance] [disclosure-failure] | 2023-02-22T18:17:48Z |
| Certinomis: email address in DNS SAN | 1503128 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:53Z |
| Certinomis: invalid CDP extension | 1524451 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:54Z |
| Certinomis: invalid DNS names in SAN | 1524094 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:55Z |
| Certinomis: Invalid SAN in a certificate | 1542793 | RESOLVED | François CHASSERY | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:56Z |
| Certinomis: invalid state and locality fields in subject | 1524103 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:57Z |
| Certinomis: Invalid TLD in SAN | 1542328 | RESOLVED | François CHASSERY | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:57Z |
| Certinomis: misissued test certificates | 1524448 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2024-06-30T19:17:15Z |
| Certinomis: Non-BR-Compliant Certificate Issuance | 1390978 | RESOLVED | Franck Leroy | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:49Z |
| Certinomis: test certificate for test.com, O=Entreprise TEST | 1496088 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2024-06-30T19:16:53Z |
| Certinomis: test certificates, O=POUR TEST in subject | 1524112 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2024-06-30T19:17:57Z |
| Certinomis: Unqualified Domain Name in SAN | 1495524 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:00Z |
| Certinomis: Use of Domain Validation Method 3.2.2.4.5 after August 1, 2018 | 1547072 | RESOLVED | François CHASSERY | [ca-compliance] | 2022-11-14T22:22:57Z |
| Certinomis: validity period >825 days | 1524449 | RESOLVED | Marc MAITRE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:01Z |
| certSIGN: "Some-State" in stateOrProvinceName | 1551375 | RESOLVED | Cristian Garabet | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:06Z |
| certSIGN: Certificates with incorrect Subject attribute order | 1886624 | RESOLVED | Gabriel PETCU | [ca-compliance] [ov-misissuance] | 2025-06-04T21:55:12Z |
| certSIGN: CPS specifies md5 and sha1WithRSAEncryption as useable signature types | 1718675 | RESOLVED | Gabriel PETCU | [ca-compliance] [policy-failure] | 2023-02-22T18:17:58Z |
| certSIGN: Delayed response to CPR | 1886626 | RESOLVED | Gabriel PETCU | [ca-compliance] [policy-failure] | 2024-06-01T14:06:21Z |
| certSIGN: Delayed revocation | 1886627 | RESOLVED | Gabriel PETCU | [ca-compliance] [leaf-revocation-delay] | 2024-06-01T14:05:46Z |
| certSIGN: Findings in 2023 ETSI Audit for certSIGN ROOT CA G2 - Audit Incident Report | 1833667 | RESOLVED | Gabriel PETCU | [ca-compliance] [audit-finding] Next update 01-Nov-2023 | 2023-11-19T22:01:50Z |
| certSIGN: Findings in 2024 ETSI Audit - Audit Incident Report | 1897134 | RESOLVED | Gabriel PETCU | [ca-compliance] [audit-finding] | 2024-09-06T15:14:19Z |
| certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report | 1963546 | RESOLVED | Gabriel PETCU | [ca-compliance] [audit-finding] | 2025-05-19T20:10:50Z |
| certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #4 – Expired cert with bad order of attributes | 1965807 | RESOLVED | Gabriel PETCU | [ca-compliance] [audit-finding] | 2025-06-04T21:55:11Z |
| certSIGN: Incorrect data in stateOrProvinceName | 1763173 | RESOLVED | Gabriel PETCU | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:59Z |
| certSIGN: misissued an OV SSL certificate with no organizationName and localityName, instead of a DV SSL as requested by client | 1674886 | RESOLVED | Gabriel PETCU | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:01Z |
| certSIGN: Missing certificate from the list of bad order subject attributtes | 1924497 | RESOLVED | Gabriel PETCU | [ca-compliance] [disclosure-failure] | 2025-01-31T16:47:57Z |
| certSIGN: Non-BR-Compliant Certificate Issuance | 1390979 | RESOLVED | Cristian Garabet | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:07Z |
| certSIGN: Non-BR-Compliant OCSP Responders | 1398243 | RESOLVED | Cristian Garabet | [ca-compliance] [ocsp-failure] | 2023-02-22T18:16:09Z |
| certSIGN: Subscriber precertificate without Certificate Policies | 1762707 | RESOLVED | Valentin Necoara | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:47Z |
| CFCA: BasicConstraints are not marked as critical certificates are missing and therefore not revoked | 1949131 | RESOLVED | Gao Fei | [ca-compliance] [ov-misissuance] | 2025-05-08T17:54:44Z |
| CFCA: certificate basicConstraints extension not marked as critical | 1886135 | RESOLVED | Gao Fei | [ca-compliance] [ov-misissuance] | 2024-09-26T18:19:38Z |
| CFCA: certificate with an incorrect OrganizationName | 1838371 | RESOLVED | Gao Fei | [ca-compliance] [ov-misissuance] | 2024-01-19T15:21:51Z |
| CFCA: Certificate with wrong crlDistributionPoints | 1809382 | RESOLVED | Gao Fei | [ca-compliance] [ov-misissuance] [ev-misissuance] Next update 2023-05-10 | 2023-09-29T15:33:03Z |
| CFCA: CRL Error | 1863122 | RESOLVED | Gao Fei | [ca-compliance] [crl-failure] | 2024-01-10T19:43:49Z |
| CFCA: Delayed reporting of intermediate CA certificate | 1784820 | RESOLVED | Gao Fei | [ca-compliance] [disclosure-failure] | 2023-08-16T20:34:22Z |
| CFCA: Delayed reporting of revocation of an intermediate CA certificate | 1798812 | RESOLVED | Gao Fei | [ca-compliance] [disclosure-failure] | 2023-05-04T21:31:28Z |
| CFCA: Delayed revocation of TLS certificates(basicConstraints extension not marked as critical) | 1888882 | RESOLVED | Gao Fei | [ca-compliance] [leaf-revocation-delay] | 2025-03-27T03:23:12Z |
| CFCA: EV certificate with wrong PostalCode&Street | 1802845 | RESOLVED | Gao Fei | [ca-compliance] [ev-misissuance] | 2023-09-29T15:32:49Z |
| CFCA: Failed to follow Report lifecycle rule to respond within 7 days | 1955799 | RESOLVED | Michael | [ca-compliance] [disclosure-failure] | 2025-04-11T16:00:26Z |
| CFCA: Failure to respond to a CPR in a complete and/or timely manner | 1888881 | RESOLVED | Gao Fei | [ca-compliance] [policy-failure] | 2025-04-03T01:34:35Z |
| CFCA: ICA without EKU | 1793053 | RESOLVED | Gao Fei | [ca-compliance] [ca-misissuance] Next update 2023-03-30 | 2023-06-30T16:29:50Z |
| CFCA: Internal iPAddress in certificate | 1524143 | RESOLVED | Jonathan Sun | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:31Z |
| CFCA: invalid dnsNames | 1524733 | RESOLVED | Jonathan Sun | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:33Z |
| CFCA: Invalid TLD in SAN | 1532429 | RESOLVED | Jonathan Sun | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:34Z |
| CFCA: Missed annual CPS update publication on website in 2018 | 1565494 | RESOLVED | Oliver Bi | [ca-compliance] [policy-failure] | 2024-06-30T20:36:41Z |
| CFCA: O > 64 characters | 1532113 | RESOLVED | Oliver Bi | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:26:47Z |
| CFCA: Overdue Audit Statements 2021 | 1741497 | RESOLVED | Oliver Bi | [ca-compliance] [audit-delay] | 2023-03-02T19:04:33Z |
| CFCA: Precertificate with postalCode and streetAddress swapped | 1771482 | RESOLVED | bixinlong | [ca-compliance] [ev-misissuance] | 2023-02-22T18:13:43Z |
| CFCA: Repeated unexplained delays in providing timely status updates | 1613409 | RESOLVED | Oliver Bi | [ca-compliance] [policy-failure] | 2023-02-22T18:26:49Z |
| CFCA: The delay in revocation of ICA | 1793059 | RESOLVED | Gao Fei | [ca-compliance] [ca-revocation-delay] | 2023-06-30T16:30:04Z |
| CFCA: The wrong status of OCSP | 1778035 | RESOLVED | Gao Fei | [ca-compliance] [ocsp-failure] | 2023-04-19T22:28:04Z |
| CFCA: Wrong OrganizationName | 1608333 | RESOLVED | Oliver Bi | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:50Z |
| CFCA: Wrong SerialNumber encoding | 1532559 | RESOLVED | Jonathan Sun | [ca-compliance] [ev-misissuance] | 2023-02-22T18:20:35Z |
| Chunghwa Telecom: “Test Website - Valid" URL disclosed to CCADB is expired | 1904038 | RESOLVED | Tsung-Min Kuo | [ca-compliance] [policy-failure] | 2025-04-18T15:31:36Z |
| Chunghwa Telecom: ALV failures on intermediate certificates | 1614444 | RESOLVED | Li-Chun CHEN | [ca-compliance] [audit-failure] | 2024-06-30T19:42:44Z |
| Chunghwa Telecom: Controversial Values within Extension (2.5.29.9, subjectDirectoryAttributes) | 1899466 | RESOLVED | Leo Fang | [ca-compliance] [ov-misissuance] | 2024-09-13T16:35:09Z |
| Chunghwa Telecom: Delayed Annual Audit Report 2024 | 1917224 | RESOLVED | Li-Chun CHEN | [ca-compliance] [audit-delay] | 2025-06-03T05:45:17Z |
| Chunghwa Telecom: Delayed Revocation Due to GTLSCA EKU Misissuance | 1892419 | RESOLVED | Leo Fang | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-12T17:11:31Z |
| Chunghwa Telecom: Delayed Revocation with Controversial Extension (2.5.29.9, SubjectDirectoryAttributes) | 1903066 | RESOLVED | Leo Fang | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-12T17:12:18Z |
| Chunghwa Telecom: Delayed to Submit Annual CCADB Self-Assessment 2024 by GTLSCA. | 1946418 | RESOLVED | Leo Fang | [ca-compliance] [policy-failure] [disclosure-failure] | 2025-03-14T16:57:56Z |
| Chunghwa Telecom: Failure to check restrictive CAA record during Migration | 1951415 | RESOLVED | Tsung-Min Kuo | [ca-compliance] [ov-misissuance] | 2025-05-08T17:53:09Z |
| Chunghwa Telecom: Failure to Submit Annual CCADB Self-Assessment 2023 by GTLSCA. | 1946414 | RESOLVED | Leo Fang | [ca-compliance] [policy-failure] [disclosure-failure] | 2025-04-09T18:45:17Z |
| Chunghwa Telecom: outdated and stale policy documents disclosed to the CCADB | 1947034 | RESOLVED | Tsung-Min Kuo | [ca-compliance] [policy-failure] [disclosure-failure] | 2025-04-11T16:00:02Z |
| Chunghwa Telecom: OV TLS Server certificate issuance by GTLSCA without proper validation | 1956910 | RESOLVED | Tsung-Min Kuo | [close on 2025-05-21] [ca-compliance] [ov-misissuance] | 2025-05-22T14:41:43Z |
| Chunghwa Telecom: Test certificate with unregistered domain name | 1532436 | RESOLVED | Li-Chun CHEN | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:43Z |
| Chunghwa Telecom: TLS Certificates Contains two LocalityName Values in SubjectDN by GTLSCA | 1916392 | RESOLVED | Leo Fang | [ca-compliance] [ov-misissuance] | 2025-02-12T17:06:54Z |
| Chunghwa Telecom: Wrong Extended Key Usage setting by GTLSCA | 1887096 | RESOLVED | Tsung-Min Kuo | [ca-compliance] [ov-misissuance] | 2024-09-06T15:13:15Z |
| CommScope: Certificate not revoked as it was supposed to be | 1859812 | RESOLVED | Nicol So | [ca-compliance] [policy-failure] | 2024-03-06T17:27:48Z |
| CommScope: Certificates not logged in CT logs as stated in CP/CPS | 1910512 | RESOLVED | Nicol So | [ca-compliance] [policy-failure] | 2024-10-07T15:39:08Z |
| CommScope: Certificates were issued in which third-party web-based tools were used during validation. | 1901578 | RESOLVED | Nicol So | [ca-compliance] [dv-misissuance] | 2024-07-28T14:40:05Z |
| CommScope: Empty SCT extensions in certificates | 1852404 | RESOLVED | Nicol So | [ca-compliance] [dv-misissuance] | 2024-07-01T21:10:48Z |
| CommScope: Incomplete Incident Report | 1904402 | RESOLVED | Nicol So | [ca-compliance] [policy-failure] | 2024-09-26T18:19:15Z |
| CommScope: OCSP responses contain issuer certificate | 1904399 | RESOLVED | Nicol So | [ca-compliance] [ocsp-failure] | 2024-08-17T07:37:59Z |
| CommScope: Service outage | 1945409 | RESOLVED | Nicol So | [ca-compliance] [ocsp-failure] | 2025-05-16T23:01:04Z |
| CommScope: Validation issue in SCT extensions in certificates | 1952591 | RESOLVED | Nicol So | [ca-compliance] [dv-misissuance] | 2025-05-16T22:59:19Z |
| Comodo: CA issuing EV Certs without Higher Authority checks | 1501374 | RESOLVED | Robin Alden | [ca-compliance] | 2024-05-09T21:00:47Z |
| Comodo: CAA Mis-Issuance on basic test case | 1410834 | RESOLVED | Robin Alden | [ca-compliance] [dv-misissuance] | 2023-02-22T18:25:05Z |
| Comodo: CAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN | 1420858 | RESOLVED | Rob Stradling | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:53Z |
| Comodo: CAA Misissuance | 1398545 | RESOLVED | Rob Stradling | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:54Z |
| Comodo: CAA misissuances due to race condition | 1423624 | RESOLVED | Rob Stradling | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:55Z |
| Comodo: Misissuance using "CNAME CSR Hash 2" method of domain control validation | 1461391 | RESOLVED | Robin Alden | [ca-compliance] [dv-misissuance] | 2023-02-22T18:25:07Z |
| Comodo: Non-BR-Compliant Certificate Issuance | 1390981 | RESOLVED | Rob Stradling | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] [disclosure-failure] | 2023-02-22T18:24:57Z |
| Comodo: Possible CAA Misissuance due against critical record | 1532313 | RESOLVED | Wayne Thayer | [ca-compliance] | 2022-11-14T22:22:57Z |
| Comodo/cPanel: Potential Mis-Issuance based on CAA records (Sep 28, 2017) | 1420873 | RESOLVED | Rob Stradling | [ca-compliance] | 2022-11-14T22:22:57Z |
| Consorci AOC: EC-SECTORPUBLIC insufficient serial number entropy | 1538673 | RESOLVED | Francesc Ferrer | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:17:41Z |
| Consorci AOC: Insufficient Audit Statements | 1425805 | RESOLVED | Francesc Ferrer | [ca-compliance] [audit-failure] | 2023-02-22T18:17:42Z |
| Consorci AOC: Misissued certificates: commonName:organizationIdentifier attribute inclusion not conforming CABForum guidelines 1.6.9 | 1590723 | RESOLVED | Francesc Ferrer | [ca-compliance] [ev-misissuance] | 2024-05-09T21:00:57Z |
| Consorci AOC: Non-BR-Compliant Certificate Issuance | 1390988 | RESOLVED | Francesc Ferrer | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:43Z |
| Consorci AOC: Non-BR-Compliant OCSP Responders | 1398246 | RESOLVED | Francesc Ferrer | [ca-compliance] [ocsp-failure] | 2023-02-22T18:17:44Z |
| Consorci AOC: OCSP responding good for non-issued certs by Consorci AOC root already solved | 1467110 | RESOLVED | Wayne Thayer | [ca-compliance] [ocsp-failure] | 2024-05-09T23:33:19Z |
| Consorci AOC: Problem reporting mechanism for Consorci AOC points to URL with invalid cert | 1428832 | RESOLVED | Francesc Ferrer | [ca-compliance] [policy-failure] [disclosure-failure] | 2023-02-22T18:17:45Z |
| Consorci AOC: Qualified audit statements | 1496616 | RESOLVED | Francesc Ferrer | [ca-compliance] [audit-failure] | 2023-02-22T18:17:46Z |
| Cybertrust Japan: CRL signature algorithm encoding error | 1827490 | RESOLVED | masahiro.shikutani | [ca-compliance] [crl-failure] | 2023-06-02T15:25:20Z |
| Cybertrust Japan: Root CRLs exceed maximum validity period by one second | 1737242 | RESOLVED | Masaru Sakamoto | [ca-compliance] [crl-failure] | 2023-02-22T18:22:27Z |
| Cybertrust Japan: three test websites not provided | 1466252 | RESOLVED | masahiro.shikutani | [ca-compliance] [uncategorized] | 2023-02-22T18:22:26Z |
| D-Trust: "unknown" OCSP response for issued certificates | 1879529 | RESOLVED | Enrico Entschew | [ca-compliance] [ocsp-failure] | 2024-04-06T02:31:59Z |
| D-TRUST: Certificate with RSA key where modulus is not divisible by 8 | 1691117 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:04Z |
| D-TRUST: CRL not DER-encoded | 1793440 | RESOLVED | Enrico Entschew | [ca-compliance] [crl-failure] | 2023-02-22T18:17:05Z |
| D-Trust: CRL-Entries without required CRL Reason Code | 1913310 | RESOLVED | Enrico Entschew | [ca-compliance] [crl-failure] | 2024-09-13T16:34:40Z |
| D-Trust: Delay beyond 5 days in revoking misissued certificate | 1862082 | RESOLVED | Enrico Entschew | [ca-compliance] [leaf-revocation-delay] | 2023-12-14T18:12:13Z |
| D-TRUST: Delayed revocation of EV certificates | 1580525 | RESOLVED | Enrico Entschew | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:17:06Z |
| D-TRUST: EV certificates with incorrectly used businessCategory entry | 1599561 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:07Z |
| D-TRUST: incorrectly formatted businessCategory entry | 1567588 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:08Z |
| D-Trust: Issuance of 15 certificates with incorrect subject attribute order | 1891225 | RESOLVED | Leyla Sahin | [ca-compliance] [ev-misissuance] Next update 2024-08-01 | 2024-08-07T14:23:15Z |
| D-Trust: Issuance of 15 DV certificates containing ‘serialNumber’ field within subject | 1861069 | RESOLVED | Enrico Entschew | [ca-compliance] [dv-misissuance] | 2024-06-01T14:02:33Z |
| D-Trust: Issuance of an EV certificate containing a mixup of the Subject's postalCode and localityName | 1896190 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2024-11-06T17:13:35Z |
| D-TRUST: Issuance of non-conformant SSL certificate | 1610303 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:10Z |
| D-Trust: LDAP-URL in Subscriber Certificate Authority Information Access field | 1884714 | RESOLVED | Enrico Entschew | [ca-compliance] [ov-misissuance] | 2024-09-13T16:34:26Z |
| D-TRUST: Non-BR-Compliant Certificate Issuance | 1390990 | RESOLVED | Arno Fiedler | [ca-compliance] [ov-misissuance] [ev-misissuance] [policy-failure] | 2023-02-22T18:14:37Z |
| D-Trust: Non-compliance of issued root and intermediate S/MIME certificates | 1918427 | RESOLVED | Enrico Entschew | [ca-compliance] [uncategorized] | 2024-10-11T17:30:42Z |
| D-Trust: Notice to affected Subscriber and person filing CPR not sent within 24 hours | 1893610 | RESOLVED | Enrico Entschew | [ca-compliance] [policy-failure] | 2024-06-30T20:21:37Z |
| D-TRUST: Precertificate OU > 64 Characters | 1563772 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:11Z |
| D-TRUST: Private Key Disclosed by Customer as Part of CSR | 1682270 | RESOLVED | Enrico Entschew | [ca-compliance] [uncategorized] | 2023-02-22T18:17:12Z |
| D-Trust: QCStatement with http link of PKI Disclosure Statements | 1939809 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2025-03-21T13:36:22Z |
| D-TRUST: syntax error in one tls certificate | 1509512 | RESOLVED | Enrico Entschew | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:13Z |
| D-TRUST: Wrong key usage (Key Agreement) | 1756122 | RESOLVED | Enrico Entschew | [ca-compliance] [dv-misissuance] | 2023-02-22T18:17:14Z |
| D-TRUST: Wrong key usage (Key Encipherment) | 1647468 | RESOLVED | Enrico Entschew | [ca-compliance] [dv-misissuance] | 2023-02-22T18:17:15Z |
| DFN-PKI: Finding in 2020 ETSI audit | 1672208 | RESOLVED | Jürgen Brauckmann | [ca-compliance] [uncategorized] | 2023-02-22T18:13:46Z |
| DFN-PKI: OCSP/CRL inconsistencies | 1786313 | RESOLVED | Jürgen Brauckmann | [ca-compliance] [crl-failure] [ocsp-failure] | 2023-02-22T18:13:47Z |
| Dhimyotis / Certigna: Certificates issued with validity periods greater than 398-days | 1667744 | RESOLVED | Josselin Allemandou | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:44Z |
| Dhimyotis / Certigna: Certificates issued with validity periods greater than 398-days | 1674082 | RESOLVED | r.delval | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:24:34Z |
| Dhimyotis / Certigna: Failure to revoke in the timeline specified by the BRs | 1685142 | RESOLVED | r.delval | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:24:36Z |
| Dhimyotis / Certigna: Intermediate CAs missing audits | 1614821 | RESOLVED | Josselin Allemandou | [ca-compliance] [audit-failure] | 2024-06-30T20:05:30Z |
| Dhimyotis / Certigna: Intermediate Cert(s) not disclosed in CCADB | 1451949 | RESOLVED | Josselin Allemandou | [ca-compliance] [disclosure-failure] | 2023-02-22T18:18:45Z |
| DigiCert / ABB: greater than 825 day cert issuance | 1451446 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:54Z |
| DigiCert / ABB: Issues with DN, country code and keyUsage | 1456655 | RESOLVED | Brenda Bernal | [ca-compliance] [ca-misissuance] | 2023-02-22T18:13:51Z |
| DigiCert / ADACOM: published expired CRLs | 1483639 | RESOLVED | Ben Wilson | [ca-compliance] [crl-failure] | 2024-06-30T18:36:07Z |
| DigiCert / CTJ: Metadata in OU fields, Reserved IP Address | 1397957 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:05Z |
| DigiCert / InfoCert: Insufficient Serial Number Entropy | 1397951 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:06Z |
| DigiCert / Inteso San Paulo: Double dot characters | 1397969 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:07Z |
| DigiCert / Justica: Invalid DNS names | 1397961 | RESOLVED | Jeremy Rowley | [ca-compliance] [dv-misissuance] | 2023-02-22T18:19:08Z |
| DigiCert / Microsoft: inconsistent disclosure of externally-operated intermediate | 1647084 | RESOLVED | Jeremy Rowley | [ca-compliance] [disclosure-failure] | 2023-02-22T18:19:09Z |
| DigiCert / Siemens: Insufficient Serial Number Entropy | 1397954 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:10Z |
| DigiCert / Swiss Government: CommonName not in SANs | 1397965 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:11Z |
| DigiCert / Symantec: EV JOI Issue | 1413761 | RESOLVED | Jeremy Rowley | [ca-compliance] [ev-misissuance] | 2023-02-22T18:19:53Z |
| DigiCert / Telecom Italia: Several Problems | 1397960 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:13Z |
| DigiCert / Terena: Metadata in OU fields | 1397958 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:14Z |
| DigiCert / Thawte: CAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN | 1420861 | RESOLVED | Jeremy Rowley | [ca-compliance] | 2024-05-09T21:01:30Z |
| DigiCert / Verizon: Qualified 2019 Audit Statements | 1573937 | RESOLVED | Brenda Bernal | [ca-compliance] [audit-finding] | 2023-02-22T18:14:27Z |
| DigiCert / Verizon: Reserved/Intranet domain name | 1397968 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:15Z |
| DigiCert / Wells Fargo: Invalid DNS names | 1397963 | RESOLVED | Jeremy Rowley | [ca-compliance] [ocsp-failure] [ov-misissuance] | 2023-02-22T18:19:16Z |
| DigiCert: "Internet Widgits Pty Ltd" in organizationalUnitName | 1639032 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:52Z |
| DigiCert: "Some-State" in stateOrProvinceName | 1551363 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:53Z |
| DigiCert: & character in a printableString in ICA | 1593814 | RESOLVED | Jeremy Rowley | [ca-compliance] [ca-misissuance] | 2023-02-22T18:19:21Z |
| DigiCert: 4 CRLs unavailable or not responding | 1820269 | RESOLVED | Martin Sullivan | [ca-compliance] [crl-failure] | 2024-06-30T18:35:27Z |
| DigiCert: Apple: Non-compliant Common Name Length | 1556906 | RESOLVED | Apple CA | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:15:45Z |
| DigiCert: Apple: Non-compliant Serial Numbers | 1533655 | RESOLVED | Apple CA | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:15:46Z |
| DigiCert: Apple: Precertificates without corresponding certificates return OCSP value of "unknown" | 1582519 | RESOLVED | Apple CA | [ca-compliance] | 2022-11-14T22:22:57Z |
| DigiCert: Apple: Unconstrained intermediate CAs not included in WTBR report | 1575125 | RESOLVED | Wayne Thayer | [ca-compliance] [audit-failure] | 2024-06-30T20:05:52Z |
| DigiCert: BR 3.2.5 Validation of Authority Failure for OV Certs | 1429639 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:22Z |
| DigiCert: CAA Checking Issue | 1550645 | RESOLVED | Brenda Bernal | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:13:55Z |
| DigiCert: Certificate Issues Identified on the Mailing List | 1389172 | RESOLVED | Kathleen Wilson | [ca-compliance] [uncategorized] | 2023-02-22T18:21:12Z |
| DigiCert: Certificates issued inconsistent with S/MIME BR v1.0.1 | 1860697 | RESOLVED | Martin Sullivan | [ca-compliance] [smime-misissuance] Next update 2023-12-21 | 2024-01-04T20:53:23Z |
| DigiCert: Delay of revocation for EV audit inconsistency incident | 1651828 | RESOLVED | Brenda Bernal | [ca-compliance] [leaf-revocation-delay] [covid-19] | 2023-02-22T18:13:56Z |
| DigiCert: delayed publication of revocation information | 1640805 | RESOLVED | Jeremy Rowley | [ca-compliance] [ocsp-failure] | 2023-02-22T18:19:23Z |
| Digicert: Delayed Revocation for bug 1894560 | 1896053 | RESOLVED | DigiCert | [close on 2025-05-08] [ca-compliance] [leaf-revocation-delay] | 2025-05-08T17:41:10Z |
| DigiCert: Delayed Revocation of ~5.5 hours | 1797165 | RESOLVED | Jeremy Rowley | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:19:24Z |
| DigiCert: Delayed revocation of IV certificates | 1846784 | RESOLVED | Martin Sullivan | [ca-compliance] [leaf-revocation-delay] | 2023-09-02T17:58:57Z |
| DigiCert: DigiCert issued cert with CN too long | 1353827 | RESOLVED | Kathleen Wilson | [ca-compliance] [ev-misissuance] [iv-misissuance] | 2023-02-22T18:21:13Z |
| DigiCert: Domain used for CRLs and OCSP has expired | 1930759 | RESOLVED | DigiCert | [ca-compliance] [external] [crl-failure] [ocsp-failure] | 2025-02-12T17:10:35Z |
| DigiCert: Domain validation skipped | 1595921 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:19:25Z |
| DigiCert: ECCE 001 issuing certificates without subject alternative name extension | 1262610 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:26Z |
| DigiCert: Encoded HTML entities in attribute values | 1936908 | RESOLVED | DigiCert | [ca-compliance] [ov-misissuance] | 2025-03-18T00:00:46Z |
| DigiCert: Entity not verified in organizationalUnitName | 1676003 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:28Z |
| DigiCert: Failure to disclose Unconstrained Intermediate within 7 Days | 1563573 | RESOLVED | Brenda Bernal | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:57Z |
| DigiCert: Failure to find and revoke key-compromised certificates within 24 hours | 1693343 | RESOLVED | Jeremy Rowley | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:19:29Z |
| Digicert: Failure to include CPS URI in 1 certificate | 1888016 | RESOLVED | Jeremy Rowley | [ca-compliance] [policy-failure] [ev-misissuance] Next update 2024-06-01 | 2024-06-05T21:36:18Z |
| DigiCert: Failure to properly encode Subject name | 1618256 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:59Z |
| DigiCert: Failure to provide a preliminary report within 24 hours. | 1649277 | RESOLVED | Brenda Bernal | [ca-compliance] [disclosure-failure] | 2023-02-22T18:14:00Z |
| DigiCert: Failure to revoke invalid serialNumber EV certificates within 5 days | 1646866 | RESOLVED | Brenda Bernal | [ca-compliance] | 2022-11-14T22:22:57Z |
| DigiCert: Failure to revoke key-compromised certificate | 1639802 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:01Z |
| DigiCert: Failure to revoke key-compromised certificates within 24 hours | 1639801 | RESOLVED | Brenda Bernal | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:03Z |
| DigiCert: Failure to revoke within 7 days: OCSP EKU issue | 1651461 | RESOLVED | Brenda Bernal | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:14:04Z |
| DigiCert: Failure to supervise ABB Subordinate CA | 1566162 | RESOLVED | Jeremy Rowley | [ca-compliance] [uncategorized] | 2023-02-22T18:19:30Z |
| DigiCert: Good OCSP Responses for Revoked Intermediates | 1523676 | RESOLVED | Ben Wilson | [ca-compliance] [ocsp-failure] | 2023-02-22T18:13:34Z |
| Digicert: Government Entity listed instead of registration number | 1891531 | RESOLVED | Jeremy Rowley | [ca-compliance] [ev-misissuance] | 2024-05-02T21:31:13Z |
| DigiCert: improper use of domain validation method | 1483715 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2024-06-30T03:28:14Z |
| DigiCert: in-addr.arpa Misissuance | 1531817 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:32Z |
| DigiCert: Inconsistent EV audits | 1650910 | RESOLVED | Brenda Bernal | [ca-compliance] [audit-failure] | 2023-02-22T18:14:05Z |
| DigiCert: Inconsistent validation information | 1824206 | RESOLVED | Martin Sullivan | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-04-07T15:35:10Z |
| DigiCert: Incorrect case in Business Category | 1894560 | RESOLVED | Martin Sullivan | [ca-compliance] [ev-misissuance] | 2024-07-03T13:27:34Z |
| DigiCert: Incorrect OCSP Delegated Responder Certificate | 1649951 | RESOLVED | Martin Sullivan | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:23Z |
| DigiCert: Incorrect Org ID Scheme in S/MIME | 1898986 | RESOLVED | Martin Sullivan | [ca-compliance] [smime-misissuance] | 2024-06-21T16:12:39Z |
| DigiCert: Incorrect OrgID in S/MIME certificates for one customer | 1927506 | RESOLVED | DigiCert | [ca-compliance] [smime-misissuance] | 2025-01-24T17:54:00Z |
| DigiCert: Incorrect RegNumber-Org Type combination | 1714439 | RESOLVED | Brenda Bernal | [ca-compliance] [ev-misissuance] | 2023-02-22T18:14:06Z |
| DigiCert: Insufficient entropy in serial numbers | 1417777 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:19:33Z |
| DigiCert: Intermediate Cert(s) not disclosed in CCADB | 1451950 | RESOLVED | Ben Wilson | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:35Z |
| DigiCert: Internal Domain Name cert mis-issuance | 1500621 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:07Z |
| DigiCert: Invalid Characters in S/MIME Subject Fields | 1936906 | RESOLVED | DigiCert | [ca-compliance] [smime-misissuance] | 2025-02-14T17:02:52Z |
| DigiCert: Invalid Country Code Issuance | 1465600 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:14:08Z |
| DigiCert: Invalid localityName | 1710856 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:14:09Z |
| DigiCert: Invalid stateOrProvinceName | 1710444 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:10Z |
| DigiCert: IP in dnsName | 1524875 | RESOLVED | Brenda Bernal | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:11Z |
| DigiCert: Issuance of Cert with Compromised Key | 1624527 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:34Z |
| DigiCert: Issuance of certs with weak keys (ROCA) | 1744795 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:35Z |
| DigiCert: JOI Issue | 1576013 | RESOLVED | Jeremy Rowley | [ca-compliance] [ev-misissuance] | 2023-02-22T18:19:36Z |
| DigiCert: Key Size Not Divisible By 8 | 1653475 | RESOLVED | Jeremy Rowley | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:19:37Z |
| DigiCert: KPN Outdated Audit | 1539296 | RESOLVED | Brenda Bernal | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:43:42Z |
| DigiCert: Late background refreshment check | 1865235 | RESOLVED | Martin Sullivan | [ca-compliance] [policy-failure] | 2023-12-07T18:27:57Z |
| DigiCert: Late CP/CPS CCADB uploads | 1814197 | RESOLVED | Martin Sullivan | [ca-compliance] [disclosure-failure] | 2023-02-14T20:36:53Z |
| DigiCert: Late incident report for bug 1925106 | 1937210 | RESOLVED | DigiCert | [ca-compliance] [disclosure-failure] | 2025-02-28T15:39:26Z |
| DigiCert: Malformed ICA | 1654967 | RESOLVED | Martin Sullivan | [ca-compliance] [ca-misissuance] | 2023-02-22T18:22:24Z |
| DigiCert: Microsoft: Incident report for Microsoft Dynamics incident | 1424305 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [crl-failure] [policy-failure] [disclosure-failure] | 2023-02-22T18:19:38Z |
| DigiCert: Mis-issuance of certificate with https in CN/SAN | 1445857 | RESOLVED | Ben Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:36Z |
| DigiCert: Mis-Issuance Rekey certificates | 1401407 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:19:17Z |
| DigiCert: Missed Underscore Certificate Revocations | 1526154 | RESOLVED | Brenda Bernal | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:13Z |
| DigiCert: Missing audits for Intermediate certificates | 1455150 | RESOLVED | Ben Wilson | [ca-compliance] [audit-failure] | 2023-02-22T18:13:38Z |
| DigiCert: no subject alternative name in Siemens certs | 1017157 | RESOLVED | Kathleen Wilson | [ca-compliance] [uncategorized] | 2023-02-22T18:21:14Z |
| DigiCert: Non-audited, non-technically-constrained intermediate certificates | 1368176 | RESOLVED | Jeremy Rowley | [ca-compliance] [disclosure-failure] [audit-failure] | 2024-06-30T20:06:13Z |
| DigiCert: Non-BR Compliant Certificates - missing CP/CPS OID | 1339339 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:41Z |
| DigiCert: Non-BR-Compliant OCSP Responders | 1398269 | RESOLVED | Jeremy Rowley | [ca-compliance] [ocsp-failure] | 2023-02-22T18:19:42Z |
| DigiCert: OCSP NextUpdate | 1627152 | RESOLVED | Brenda Bernal | [ca-compliance] [ocsp-failure] | 2023-02-22T18:14:14Z |
| DigiCert: OCSP not responding issue | 1816806 | RESOLVED | Brenda Bernal | [ca-compliance] [ocsp-failure] | 2023-03-09T21:36:21Z |
| DigiCert: OCSP responder returning invalid responses | 1662346 | RESOLVED | Martin Sullivan | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:25Z |
| DigiCert: OCSP services returns 1 byte | 1577014 | RESOLVED | Jeremy Rowley | [ca-compliance] [ocsp-failure] | 2023-02-22T18:19:18Z |
| DigiCert: Onion Certs | 1447192 | RESOLVED | Jeremy Rowley | [ca-compliance] [ev-misissuance] | 2023-02-22T18:19:19Z |
| DigiCert: Org information issue in new validation workflow | 1794050 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:19:43Z |
| DigiCert: Org-JOI type mismatch | 1827772 | RESOLVED | Jeremy Rowley | [ca-compliance] [ev-misissuance] | 2023-05-04T21:26:43Z |
| DigiCert: Outdated CPS for 13 Roots in CCADB | 1945536 | RESOLVED | DigiCert | [ca-compliance] [policy-failure] [disclosure-failure] | 2025-06-02T14:30:53Z |
| DigiCert: P-384,ecdsa-with-SHA512 Certificates | 1527423 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:14:15Z |
| Digicert: Preview certificate uploaded to CCADB instead of the actual certificate | 1896462 | RESOLVED | Jeremy Rowley | [ca-compliance] [policy-failure] | 2024-06-01T13:58:43Z |
| DigiCert: Private Keys Disclosed by Customers as Part of CSR | 1675684 | RESOLVED | Jeremy Rowley | [ca-compliance] [uncategorized] | 2023-02-22T18:19:44Z |
| DigiCert: Random value in CNAME without underscore prefix | 1910322 | RESOLVED | DigiCert | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2025-02-24T21:59:12Z |
| DigiCert: RapidSSL CAA Mis-Issuance: Lookup failure on DNSSEC-signed zone | 1409735 | RESOLVED | Steven Medin | [ca-compliance] [dv-misissuance] | 2024-05-09T23:37:44Z |
| DigiCert: Revoked intermediate certificates not in CRL | 1548719 | RESOLVED | Stephen Davidson | [ca-compliance] [crl-failure] | 2023-02-22T18:26:12Z |
| DigiCert: SCEE / Justica: Non-BR-Compliant Certificate Issuance | 1436173 | RESOLVED | Ben Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:39Z |
| DigiCert: SHA-1 intermediate issued after 2016-01-01 | 1684442 | RESOLVED | Jeremy Rowley | [ca-compliance] [ca-misissuance] | 2023-02-22T18:19:45Z |
| DigiCert: SHA-256 hash algorithm used with ECC P-384 key | 1664325 | RESOLVED | Brenda Bernal | [ca-compliance] [ca-misissuance] | 2023-02-22T18:14:16Z |
| Digicert: SMIME certificate with unvalidated information | 1881364 | RESOLVED | Martin Sullivan | [ca-compliance] [smime-misissuance] | 2024-03-29T15:03:24Z |
| DigiCert: SMIME certificates issued inconsistent with BR’s | 1853463 | RESOLVED | Martin Sullivan | [ca-compliance] [smime-misissuance] Next update 2-Oct-2023 | 2023-10-12T10:22:54Z |
| Digicert: SMIME certs missing State in Org ID | 1875205 | RESOLVED | Martin Sullivan | [ca-compliance] [smime-misissuance] | 2024-01-26T17:08:25Z |
| DigiCert: Some CRLs were not updated for a few days | 1932994 | RESOLVED | DigiCert | [ca-compliance] [crl-failure] | 2025-02-12T17:10:53Z |
| DigiCert: Sub CA with EV OIDs without audit report | 1838334 | RESOLVED | Martin Sullivan | [ca-compliance] [ca-misissuance] | 2023-06-26T15:41:25Z |
| DigiCert: Symantec non-constrained/non-disclosed intermediate CA certificates | 1417771 | RESOLVED | Jeremy Rowley | [ca-compliance] [disclosure-failure] [audit-failure] | 2024-06-30T20:06:39Z |
| DigiCert: TERENA: Insufficient validation of organizationalUnitName | 1675923 | RESOLVED | Jeremy Rowley | [ca-compliance] | 2024-05-09T23:40:11Z |
| DigiCert: TERENA: No localityName in EV precert | 1586604 | RESOLVED | Jeremy Rowley | [ca-compliance] | 2022-11-14T22:22:57Z |
| DigiCert: TI Trust Technologies Global CA issued certificate with no subject alternative name extension | 1304895 | RESOLVED | Wayne Thayer | [ca-compliance] [ov-misissuance] | 2023-02-22T18:28:19Z |
| DigiCert: TLS certificates with incorrect policy OID | 1845634 | RESOLVED | Martin Sullivan | [ca-compliance] [ov-misissuance] | 2023-09-02T17:59:16Z |
| DigiCert: Truncation of Registration Number | 1727963 | RESOLVED | Jeremy Rowley | [ca-compliance] [ev-misissuance] | 2023-02-22T18:19:48Z |
| DigiCert: Typo in TLS Org Name | 1910258 | RESOLVED | DigiCert | [ca-compliance] [ov-misissuance] | 2025-01-29T22:33:00Z |
| DigiCert: Unclear Disclosure of CAA Issuer Domain Names | 1914911 | RESOLVED | Tim Hollebeek | [ca-compliance] [policy-failure] [external] | 2025-01-08T16:59:51Z |
| DigiCert: Underscore character certificates | 1515564 | RESOLVED | Jeremy Rowley | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:19:49Z |
| DigiCert: Underscores - Canadian Imperial Bank of Commerce | 1516561 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:17Z |
| DigiCert: Underscores - Citi | 1517617 | RESOLVED | Brenda Bernal | [ca-compliance] [ev-misissuance] | 2023-02-22T18:14:18Z |
| DigiCert: Underscores - CVS Pharmacy | 1515788 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:19Z |
| DigiCert: Underscores - Discover | 1516453 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:20Z |
| DigiCert: Underscores - Ericsson | 1516599 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:22Z |
| DigiCert: Underscores - Intuit | 1519572 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:23Z |
| DigiCert: Underscores - Verizon | 1516545 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:24Z |
| DigiCert: Undisclosed CAs -Federated Trust CA-1 | 1499585 | RESOLVED | Wayne Thayer | [ca-compliance] [disclosure-failure] | 2023-02-22T18:28:20Z |
| DigiCert: Unrevocation of BT Class 2 CA - G2 CA Certificate | 1442091 | RESOLVED | Ben Wilson | [ca-compliance] [crl-failure] [ocsp-failure] | 2023-02-22T18:13:40Z |
| DigiCert: Use of forbidden subjectPublicKeyInfo algorithm | 1518555 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:50Z |
| DigiCert: Validation Scope Incident | 1556948 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:19:20Z |
| DigiCert: Verizon CPS lacks CPR problem reporting instructions | 1596931 | RESOLVED | Jeremy Rowley | [ca-compliance] [policy-failure] | 2024-06-30T20:22:39Z |
| DigiCert: Verizon mis-issued test certificates | 1335132 | RESOLVED | Jeremy Rowley | [ca-compliance] [ov-misissuance] | 2023-02-22T18:19:52Z |
| DigiCert: Verizon: "Default City" in Subject:localityName | 1548716 | RESOLVED | Brenda Bernal | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:14:25Z |
| DigiCert: WTCA / WTBR Audit 2019 - Matters to be resolved | 1613505 | RESOLVED | Brenda Bernal | [ca-compliance] [audit-finding] | 2023-02-22T18:14:26Z |
| Disig: Failure to Respond to Jun 2023 Apple Root Program Survey | 1846216 | RESOLVED | Peter Miskovic | [ca-compliance] [disclosure-failure] | 2023-09-29T15:34:20Z |
| Disig: Certificates with incorrect Subject attribute order | 1889672 | RESOLVED | Jozef Nigut | [ca-compliance] [ov-misissuance] | 2024-06-01T14:10:18Z |
| Disig: CPS does not refer to BR domain validation methods | 1717001 | RESOLVED | Peter Miskovic | [ca-compliance] | 2022-11-14T22:22:57Z |
| Disig: Failure to provide a preliminary report within 24 hours. | 1670458 | RESOLVED | Peter Miskovic | [ca-compliance] [disclosure-failure] | 2023-02-22T18:24:05Z |
| Disig: Non-BR-Compliant Certificate Issuance | 1390991 | RESOLVED | Peter Miskovic | [ca-compliance] [ov-misissuance] [remediation-accepted] | 2023-02-22T18:24:06Z |
| Disig: Non-BR-Compliant OCSP Responders | 1398242 | RESOLVED | Peter Miskovic | [ca-compliance] [ocsp-failure] | 2023-02-22T18:24:07Z |
| Disig: TLS certificate with basicConstraints not marked as critical | 1888104 | RESOLVED | Jozef Nigut | [ca-compliance] [ov-misissuance] | 2024-07-11T15:03:49Z |
| Disig: Two certificates with same serial number | 1907667 | RESOLVED | Peter Miskovic | [ca-compliance] [ov-misissuance] | 2024-08-17T07:39:14Z |
| DocuSign/Keynectis: Missing BR Self Assessment | 1458038 | RESOLVED | Erwann Abalea | [ca-compliance] | 2022-11-14T22:22:57Z |
| DocuSign/Keynectis: Non-BR-Compliant Certificate Issuance | 1390994 | RESOLVED | Erwann Abalea | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:17Z |
| DocuSign/Keynectis: Non-BR-Compliant OCSP Responders | 1398247 | RESOLVED | Erwann Abalea | [ca-compliance] [ocsp-failure] | 2023-02-22T18:17:18Z |
| DocuSign/Keynectis: Non-Compliant Technically Constrained Intermediates | 1444455 | RESOLVED | Erwann Abalea | [ca-compliance] [ca-misissuance] | 2023-02-22T18:17:19Z |
| DocuSign/Keynectis: Outdated audit statements for Class 2 Primary CA | 1447497 | RESOLVED | Wayne Thayer | [ca-compliance] | 2022-11-14T22:22:57Z |
| DocuSign/Keynectis: Undisclosed Intermediate certificate | 1497700 | RESOLVED | Erwann Abalea | [ca-compliance] | 2022-11-14T22:22:57Z |
| DSV-Gruppe: Failure to respond to January 2018 survey | 1439129 | RESOLVED | Wayne Thayer | [ca-compliance] [disclosure-failure] | 2023-03-20T15:00:54Z |
| e-commerce monitoring GmbH: Delayed revocation | 1862004 | RESOLVED | Daniel Zens | [ca-compliance] [leaf-revocation-delay] [external] | 2024-07-09T16:38:25Z |
| e-commerce monitoring gmbh: certificate issued with two pre-certificates | 1830536 | RESOLVED | Daniel Zens | [ca-compliance] [ov-misissuance] | 2024-05-11T00:31:48Z |
| e-commerce monitoring GmbH: CN domain not in SAN | 1716123 | RESOLVED | Daniel Zens | [ca-compliance] [ov-misissuance] | 2024-05-25T18:46:20Z |
| e-commerce monitoring GmbH: CRLs with mismatched issuer | 1888371 | RESOLVED | Daniel Zens | [ca-compliance] [crl-failure] [external] | 2024-07-09T16:38:42Z |
| e-commerce monitoring gmbh: failure to follow incident report requirements | 1893546 | RESOLVED | Daniel Zens | [ca-compliance] [policy-failure] [external] | 2024-07-09T16:38:56Z |
| e-commerce monitoring gmbh: failure to maintain links to historic CP/CPS versions | 1897457 | RESOLVED | Daniel Zens | [ca-compliance] [policy-failure] | 2024-07-09T16:39:11Z |
| e-commerce monitoring gmbh: precertificate validity does not match leaf certificate | 1883711 | RESOLVED | Daniel Zens | [ca-compliance] [ov-misissuance] | 2024-07-09T16:39:27Z |
| e-commerce monitoring GmbH: Revoked test website not using revoked certificate | 1716163 | RESOLVED | Daniel Zens | [ca-compliance] [policy-failure] | 2024-05-25T18:52:21Z |
| e-commerce monitoring GmbH: SCT in precertificate | 1815534 | RESOLVED | Daniel Zens | [ca-compliance] [ov-misissuance] [external] | 2024-04-17T17:37:45Z |
| E-Tugra: audit delay because of an environmental disaster/pandemic | 1659426 | RESOLVED | Davut Tokgöz | [ca-compliance] [audit-failure] [covid-19] [audit-delay] | 2024-06-30T19:44:06Z |
| E-Tugra: commonName not in SAN | 1687139 | RESOLVED | Davut Tokgöz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:43Z |
| E-Tugra: Delayed Response of Revocation Request | 1687513 | RESOLVED | Davut Tokgöz | [ca-compliance] [policy-failure] | 2023-02-22T18:16:44Z |
| E-Tugra: Failure to respond to January 2018 survey | 1439128 | RESOLVED | Davut Tokgöz | [ca-compliance] [disclosure-failure] | 2023-02-22T18:16:45Z |
| E-Tugra: Failure to Respond to May 2022 Survey | 1772414 | RESOLVED | Davut Tokgöz | [ca-compliance] [disclosure-failure] | 2023-02-22T18:16:46Z |
| E-Tugra: Forbidden Domain Validation Method 3.2.2.4.6 | 1716902 | RESOLVED | Davut Tokgöz | [ca-compliance] [policy-failure] | 2023-02-22T18:16:48Z |
| E-Tugra: Improper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString | 1462797 | RESOLVED | Davut Tokgöz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:49Z |
| E-Tugra: Incident Report (Security Issues) | 1801345 | RESOLVED | Ahmed | [ca-compliance] [uncategorized] | 2023-07-21T15:45:27Z |
| E-Tugra: Insufficient serial number entropy | 1542302 | RESOLVED | Davut Tokgöz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:50Z |
| E-Tugra: Intermediate CA Certificate Missing from Audit Reports | 1716843 | RESOLVED | Davut Tokgöz | [ca-compliance] [audit-failure] | 2024-06-30T20:07:16Z |
| E-Tugra: Intermittent OCSP response with status 'Unknown' | 1687330 | RESOLVED | Davut Tokgöz | [ca-compliance] [ocsp-failure] | 2023-02-22T18:16:51Z |
| E-Tugra: Invalid DER results in failure to comply with RFC 5280 - Violating string length limit | 1582601 | RESOLVED | Davut Tokgöz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:52Z |
| E-Tugra: The failure to revoke a certificate | 1687608 | RESOLVED | Davut Tokgöz | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:16:53Z |
| E-Tugra: Validity period > 825 days | 1449371 | RESOLVED | Davut Tokgöz | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:54Z |
| EDICOM: Signing SHA-1 OCSP responses with unconstrained certificate | 1397830 | RESOLVED | Raúl Santisteban | [ca-compliance] [ocsp-failure] | 2023-02-22T18:26:03Z |
| eMudhra emSign PKI Services : Issue with revocation as part of automated reissuance | 1941009 | RESOLVED | Naveen Kumar ML | [ca-compliance] [uncategorized] | 2025-04-09T18:44:16Z |
| eMudhra emSign PKI Services : Key Blocking Mechanism Fails to Validate Historical Public Key Reuse. | 1931683 | RESOLVED | Naveen Kumar ML | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2025-04-09T18:44:55Z |
| eMudhra emSign PKI Services : OCSP Responder Time Inconsistency | 1917459 | RESOLVED | Naveen Kumar ML | [ca-compliance] [ocsp-failure] | 2025-02-14T17:06:00Z |
| eMudhra emSign PKI Services: CA Certificates not published in DER Encoded Format | 1914466 | RESOLVED | Naveen Kumar ML | [ca-compliance] [policy-failure] | 2024-10-02T18:33:57Z |
| eMudhra emSign PKI Services: Delayed Revocation of SSL/TLS Certificates | 1916478 | RESOLVED | Naveen Kumar ML | [ca-compliance] [leaf-revocation-delay] | 2025-04-09T18:44:34Z |
| eMudhra emSign PKI Services: Failure To Update CA Owner Information In CCADB | 1924492 | RESOLVED | Naveen Kumar ML | [ca-compliance] [disclosure-failure] | 2025-02-14T17:06:16Z |
| eMudhra: Audit Delay | 1728790 | RESOLVED | Vijay Kumar | [ca-compliance] [audit-failure] [covid-19] [audit-delay] | 2024-06-30T19:44:30Z |
| eMudhra: CRL occasionally unavailable and returns 404 error | 1821508 | RESOLVED | Vijay Kumar | [ca-compliance] [crl-failure] | 2024-06-30T18:37:37Z |
| eMudhra: emSign CA ECC Test Certificate Misissuance | 1665688 | RESOLVED | Vijay Kumar | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:28:01Z |
| eMudhra: emSign CA Invalid AIA Extension Value | 1763700 | RESOLVED | Vijay Kumar | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:59Z |
| eMudhra: emSign CA Invalid OrganizationalUnitName | 1745015 | RESOLVED | Vijay Kumar | [ca-compliance] [dv-misissuance] | 2023-02-22T18:28:00Z |
| eMudhra: Failure to Respond to May 2022 Survey | 1772413 | RESOLVED | Vijay Kumar | [ca-compliance] [disclosure-failure] | 2023-03-20T15:03:21Z |
| Entrust: Action Items from June 2024 Report | 1901270 | RESOLVED | Ben Wilson | [ca-compliance] [meta] | 2025-02-03T18:06:54Z |
| Entrust: AffirmTrust Issuing CA Impacted by EJBCA Serial Number Issue | 1536287 | RESOLVED | Dathan Demone | [ca-compliance] [ca-misissuance] [ov-misissuance] | 2023-02-22T18:16:11Z |
| Entrust: Business Entity not permitted in CPS | 1918380 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] | 2024-11-06T17:13:50Z |
| Entrust: Certificate issued with '-' in ST field | 1512018 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:38Z |
| Entrust: Certificate Issued with Incorrect Country Code | 1559376 | RESOLVED | Dathan Demone | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:12Z |
| Entrust: Certificate issued with validity greater than 825-days | 1561013 | RESOLVED | Bruce Morton | [ca-compliance] [ev-misissuance] | 2023-02-22T18:14:39Z |
| Entrust: clientAuth TLS Certificates without serverAuth EKU | 1886467 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [ev-misissuance] | 2024-06-28T19:01:40Z |
| Entrust: Compromised Private Key was not Revoked in Less than 24 Hours | 1611241 | RESOLVED | Dathan Demone | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:16:13Z |
| Entrust: CPR was not responded to in 24 hours | 1885754 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [external] [policy-failure] | 2024-09-13T16:33:42Z |
| Entrust: CPS typographical (text placement) error | 1890896 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] | 2024-08-15T13:35:16Z |
| Entrust: CRL missing revocation reasonCode | 1931886 | RESOLVED | Bruce Morton | [ca-compliance] [crl-failure] | 2025-02-12T17:07:51Z |
| Entrust: CRL non-conformance with the TLS BRs | 1889217 | RESOLVED | Bruce Morton | [ca-compliance] [crl-failure] [external] | 2024-07-01T15:09:09Z |
| Entrust: CRLs and OCSP responses not issued as specified in the CPS | 1737057 | RESOLVED | Bruce Morton | [ca-compliance] [crl-failure] [ocsp-failure] | 2023-02-22T18:14:41Z |
| Entrust: Cross-certified CA CP/CPS not updated in CCADB | 1956681 | RESOLVED | Bruce Morton | [ca-compliance] [disclosure-failure] | 2025-05-08T17:51:16Z |
| Entrust: Delay in Updating CPS | 1887753 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] [ev-misissuance] | 2024-07-12T16:30:01Z |
| Entrust: Delayed incident report - CPS typographical (text placement) error | 1890901 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] | 2024-05-05T19:36:31Z |
| Entrust: Delayed reporting of Jurisdiction issue in some EV TLS & Code Signing certificates | 1898847 | RESOLVED | ngook.kong | [ca-compliance] [policy-failure] | 2024-08-15T13:36:14Z |
| Entrust: delayed revocation | 1943528 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [leaf-revocation-delay] [external] | 2025-02-19T18:15:49Z |
| Entrust: Delayed Revocation for EV TLS Certificate incorrect jurisdiction | 1804753 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2023-04-19T22:26:20Z |
| Entrust: Delayed Revocation for S/MIME certificates | 1910237 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2025-05-13T22:52:41Z |
| Entrust: Delayed revocation of certificates affected by Jurisdiction issue in some EV TLS & Code Signing certificates | 1898848 | RESOLVED | ngook.kong | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-31 | 2025-02-21T16:31:31Z |
| Entrust: Delayed revocation of clientAuth TLS Certificates without serverAuth EKU | 1887705 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [leaf-revocation-delay] | 2024-09-12T12:19:27Z |
| Entrust: Delayed revocation of EV TLS certificates with missing cPSuri | 1886532 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-31 | 2025-02-21T16:30:45Z |
| Entrust: EV Certificate missing Issuer’s EV Policy OID | 1888714 | RESOLVED | Bruce Morton | [ca-compliance] [ev-misissuance] | 2024-07-11T15:03:29Z |
| Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization" | 1599484 | RESOLVED | Dathan Demone | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:14Z |
| Entrust: EV TLS Certificate cPSuri missing | 1883843 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [ev-misissuance] | 2024-08-13T17:19:59Z |
| Entrust: EV TLS Certificate incorrect jurisdiction | 1802916 | RESOLVED | Bruce Morton | [ca-compliance] [ev-misissuance] | 2023-04-24T19:50:18Z |
| Entrust: Failed to provide a preliminary incident report according to TLS BR 4.9.5 | 1890123 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [policy-failure] | 2024-08-13T17:20:21Z |
| Entrust: Failure to provide a preliminary report within 24 hours. | 1667690 | RESOLVED | Dathan Demone | [ca-compliance] [disclosure-failure] | 2023-02-22T18:16:15Z |
| Entrust: Failure to revoke a certificate | 1636339 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:42Z |
| Entrust: Failure to revoke EV TLS certificates issued before CPS update | 1890685 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] [leaf-revocation-delay] Next update 2025-03-31 | 2025-02-21T16:31:14Z |
| Entrust: Failure to revoke OV TLS - CPS typographical (text placement) error | 1890898 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] [leaf-revocation-delay] Next update 2024-06-17 | 2024-07-28T14:39:21Z |
| Entrust: Improperly Verified Business Category | 1921387 | RESOLVED | Bruce Morton | [ca-compliance] [uncategorized] | 2025-03-18T00:12:53Z |
| Entrust: Incorrect Business Category Value Discovered in an EV SSL Certificate | 1685370 | RESOLVED | Dathan Demone | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:16Z |
| Entrust: Incorrect Jurisdiction Country Value in an EV Certificate | 1696227 | RESOLVED | Dathan Demone | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:17Z |
| Entrust: Incorrect keyUsage for ECC certificate | 1667448 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:43Z |
| Entrust: Incorrect value in Business Category field for Government Entities | 1728796 | RESOLVED | Paul van Brouwershaven | [ca-compliance] [ev-misissuance] | 2023-02-22T18:23:42Z |
| Entrust: Invalid data in commonName fields | 1675295 | RESOLVED | Bruce Morton | [ca-compliance] | 2022-11-14T22:22:57Z |
| Entrust: Invalid data in State/Province Field | 1658792 | RESOLVED | Dathan Demone | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:18Z |
| Entrust: Invalid localityName | 1712106 | RESOLVED | Dathan Demone | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:19Z |
| Entrust: IP Address in dNSName form | 1448986 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:45Z |
| Entrust: IP in dnsName | 1524876 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:46Z |
| Entrust: Issued Certificates to incorrect Organization | 1535735 | RESOLVED | Dathan Demone | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:20Z |
| Entrust: Jurisdiction issue in some EV TLS & Code Signing certificates | 1897630 | RESOLVED | ngook.kong | [ca-compliance] [ev-misissuance] | 2024-08-15T13:35:41Z |
| Entrust: Jurisdiction Locality Wrong in EV Certificate | 1867130 | RESOLVED | Bruce Morton | [ca-compliance] [ev-misissuance] Next update 2024-01-31 | 2024-05-10T15:42:20Z |
| Entrust: Late mis-issue certificate revocation | 1520876 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:47Z |
| Entrust: Late Revocation due to SHA-256 hash algorithm | 1651481 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:48Z |
| Entrust: Late Revocation for Invalid State/Province Issue | 1658794 | RESOLVED | Dathan Demone | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:16:21Z |
| Entrust: Late Revocation for SSL Certificates issued with Un-verified IP Addresses | 1748634 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:49Z |
| Entrust: Late revocation of underscore certificate | 1521520 | RESOLVED | Bruce Morton | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:50Z |
| Entrust: Non-BR-Compliant Certificate Issuance | 1390996 | RESOLVED | Kirk Hall | [ca-compliance] [ov-misissuance] [remediation-accepted] | 2023-02-22T18:21:04Z |
| Entrust: Non-BR-Compliant OCSP Responder | 1428891 | RESOLVED | Bruce Morton | [ca-compliance] [ocsp-failure] | 2023-02-22T18:14:51Z |
| Entrust: Not updating CPR Problem Reporting Mechanism fields in CCADB | 1894111 | RESOLVED | Bruce Morton | [ca-compliance] [policy-failure] | 2025-01-22T19:53:02Z |
| Entrust: OCSP response signed with SHA-1 | 1879602 | RESOLVED | Bruce Morton | [ca-compliance] [ocsp-failure] | 2024-07-19T17:47:10Z |
| Entrust: Outdated audit statement for intermediate cert | 1549862 | RESOLVED | Bruce Morton | [ca-compliance] [audit-failure] | 2023-02-22T18:14:52Z |
| Entrust: Printable String Constraint Failure | 1635096 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:53Z |
| Entrust: Question marks in certificate O and L fields | 1552562 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:54Z |
| Entrust: S/MIME Certificate Issued with Incorrect Policy OID | 1627346 | RESOLVED | Bruce Morton | [ca-compliance] [uncategorized] | 2023-02-22T18:14:55Z |
| Entrust: S/MIME certificates lacking OU verification | 1914065 | RESOLVED | Bruce Morton | [ca-compliance] [smime-misissuance] | 2025-02-28T15:38:40Z |
| Entrust: S/MIME mailbox address case mismatch between subject and subjectAltName | 1906470 | RESOLVED | Bruce Morton | [ca-compliance] [smime-misissuance] | 2025-05-13T20:14:42Z |
| Entrust: S/MIME mailbox address not in subjectAltName | 1906467 | RESOLVED | Bruce Morton | [ca-compliance] [smime-misissuance] | 2025-05-13T20:14:23Z |
| Entrust: S/MIME OrgID Country not matching C field | 1914999 | RESOLVED | Bruce Morton | [ca-compliance] [smime-misissuance] | 2025-02-28T15:38:26Z |
| Entrust: SHA-1 Issuance and other misissuance while testing | 1567659 | RESOLVED | Bruce Morton | [ca-compliance] [ev-misissuance] | 2023-02-22T18:14:56Z |
| Entrust: SHA-256 hash algorithm used with ECC P-384 key | 1648472 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2024-06-30T05:20:18Z |
| Entrust: SSL Certificates issued with Un-verified IP Addresses | 1744827 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2024-03-08T07:27:48Z |
| Entrust: Subscriber provides private key with CSR | 1673119 | RESOLVED | Bruce Morton | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:15:00Z |
| Entrust: Test Website Certificates Expired | 1731887 | RESOLVED | Bruce Morton | [ca-compliance] [uncategorized] | 2023-02-22T18:15:01Z |
| Entrust: TLS Certificate issued with a key that is impacted by the Close Primes vulnerability | 1766525 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-02-22T18:15:02Z |
| Entrust: TLS Certificate issued with an incorrect state or province | 1792231 | RESOLVED | Bruce Morton | [ca-compliance] [ov-misissuance] | 2023-04-19T22:25:51Z |
| Firmaprofesional / SIGNE: No BR Audit for intermediate CA technically capable of issuing TLS certs | 1586115 | RESOLVED | chemalogo | [ca-compliance] [audit-failure] | 2024-06-30T20:07:43Z |
| Firmaprofesional: 2019 audit Finding #1 - 6.2 Identification and Authorization | 1610448 | RESOLVED | chemalogo | [ca-compliance] [audit-finding] | 2023-02-22T18:15:49Z |
| Firmaprofesional: 2019 audit Finding #2 - 6.4 Facility, management, and operational controls | 1612929 | RESOLVED | chemalogo | [ca-compliance] [audit-finding] | 2023-02-22T18:15:50Z |
| Firmaprofesional: 2019 Audit Report Findings | 1606380 | RESOLVED | chemalogo | [ca-compliance] [audit-finding] | 2023-02-22T18:15:51Z |
| Firmaprofesional: 2020 Audit Report Finding 1 out of 4 | 1649502 | RESOLVED | chemalogo | [ca-compliance] [audit-finding] | 2023-02-22T18:15:52Z |
| Firmaprofesional: 2020 Audit Report Finding 2 out of 4 | 1649679 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:22:58Z |
| Firmaprofesional: 2020 Audit Report Finding 3 out of 4 | 1649724 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:22:59Z |
| Firmaprofesional: 2020 Audit Report Finding 4 out of 4 | 1649726 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:23:00Z |
| Firmaprofesional: 2021 Audit Report Finding 1 out of 3 | 1717790 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:23:02Z |
| Firmaprofesional: 2021 Audit Report Finding 2 out of 3 | 1717791 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:23:03Z |
| Firmaprofesional: 2021 Audit Report Finding 3 out of 3 | 1717795 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:23:04Z |
| Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL | 1771724 | RESOLVED | Maria Jose Prieto | [ca-compliance] [policy-failure] [audit-finding] | 2023-02-22T18:23:05Z |
| Firmaprofesional: 2022 - Define Device Obsolescence Process | 1771727 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:23:06Z |
| Firmaprofesional: 2022 - SSL certificates issued with wrong Organization ID number | 1769240 | RESOLVED | Maria Jose Prieto | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:23:07Z |
| Firmaprofesional: 2022 - StateorProvince field | 1771715 | RESOLVED | Maria Jose Prieto | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:23:08Z |
| Firmaprofesional: 2022 - Title field | 1771722 | RESOLVED | Maria Jose Prieto | [ca-compliance] [audit-finding] | 2023-02-22T18:23:09Z |
| Firmaprofesional: 2023 - documentary inconsistency | 1832342 | RESOLVED | Ben Wilson | [ca-compliance] [audit-finding] | 2023-10-12T10:25:32Z |
| Firmaprofesional: 2023 - Ensure Timestamp service Logs Integrity | 1832338 | RESOLVED | Maria Jose Prieto | [ca-compliance] | 2023-06-08T16:44:58Z |
| Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy | 1538638 | RESOLVED | chemalogo | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:15:53Z |
| FIRMAPROFESIONAL: Delayed leaf revocation | 1891251 | RESOLVED | ext-antoni.camon | [ca-compliance] [leaf-revocation-delay] | 2024-06-01T14:07:52Z |
| Firmaprofesional: Failure to Respond to April 2023 Survey | 1838864 | RESOLVED | Maria Jose Prieto | [ca-compliance] [disclosure-failure] | 2023-07-14T18:26:06Z |
| Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU | 1651637 | RESOLVED | Maria Jose Prieto | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:23:10Z |
| Firmaprofesional: Incorrect OCSP Delegated Responder Certificate | 1649943 | RESOLVED | chemalogo | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:54Z |
| Firmaprofesional: Incorrect publication of information for "Test Website - Revoked" URL in the CCADB. | 1925293 | RESOLVED | ext-antoni.camon | [ca-compliance] [policy-failure] | 2025-02-28T15:37:36Z |
| Firmaprofesional: incorrect reserved CA/B Forum OIDs in certificates | 1700145 | RESOLVED | chemalogo | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:15:55Z |
| Firmaprofesional: Insufficient Audit Statements | 1412950 | RESOLVED | Oscar Conesa | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:45:20Z |
| Firmaprofesional: Missing BR Self Assessment | 1458064 | RESOLVED | chemalogo | [ca-compliance] [uncategorized] | 2023-02-22T18:15:56Z |
| Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates | 1368171 | RESOLVED | Oscar Conesa | [ca-compliance] [audit-failure] | 2024-06-30T20:08:03Z |
| Firmaprofesional: Non-BR-Compliant OCSP Responders | 1398240 | RESOLVED | chemalogo | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:57Z |
| Firmaprofesional: Policy Qualifiers other than id-qt-cps present for certificate | 1889420 | RESOLVED | ext-antoni.camon | [ca-compliance] [ov-misissuance] | 2024-09-04T16:07:42Z |
| Firmaprofesional: Undisclosed Intermediate certificate | 1455119 | RESOLVED | chemalogo | [ca-compliance] [disclosure-failure] | 2023-02-22T18:15:58Z |
| Firmaprofesional: Undisclosed Intermediate certificate SDS | 1464359 | RESOLVED | Wayne Thayer | [ca-compliance] [disclosure-failure] | 2023-02-22T18:28:27Z |
| Firmaprofesional: Undisclosed Intermediate certificate SIGNE | 1464335 | RESOLVED | Wayne Thayer | [ca-compliance] [disclosure-failure] | 2023-02-22T18:28:28Z |
| FNMT: Certificates issued included Policy qualifiers other than id-qt-cps | 1875942 | RESOLVED | Amaya Espinosa | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2024-08-28T21:35:31Z |
| FNMT: CP/CPS lack CAA processing details | 1596949 | RESOLVED | alain | [ca-compliance] [policy-failure] | 2023-02-22T18:12:10Z |
| FNMT: CRL problems displayed during the monitoring | 1828717 | RESOLVED | Amaya Espinosa | [ca-compliance] [crl-failure] | 2023-09-29T15:32:36Z |
| FNMT: Findings in 2019 Audit Statement, including domain validation methods, CAA, etc. | 1544586 | RESOLVED | alain | [ca-compliance] [uncategorized] | 2023-02-22T18:12:11Z |
| FNMT: Incorrect publication of information for Test Website - Valid | 1947207 | RESOLVED | Amaya Espinosa | [ca-compliance] [policy-failure] | 2025-02-28T15:38:56Z |
| FNMT: Invalid localityName | 1744722 | RESOLVED | alain | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:06Z |
| FNMT: Issuance of QCP-n certificates without verifying identity | 1693304 | RESOLVED | alain | [ca-compliance] [uncategorized] | 2023-02-22T18:12:07Z |
| FNMT: LDAP URI in CRL Distribution Points Extension | 1922906 | RESOLVED | Amaya Espinosa | [ca-compliance] [ov-misissuance] | 2025-02-12T17:08:20Z |
| FNMT: Minor non-conformities in 2020 audit statement | 1626805 | RESOLVED | alain | [ca-compliance] [audit-finding] | 2023-02-22T18:12:08Z |
| FNMT: Minor non-conformities in 2021 audit statement | 1704199 | RESOLVED | Brox | [ca-compliance] [audit-finding] | 2023-02-22T18:26:06Z |
| FNMT: Missisuance of web site certificates without CA/Browser Forum’s reserved policy OID | 1696872 | RESOLVED | alain | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2025-03-20T06:26:37Z |
| FNMT: OU exceeds 64 characters | 1495507 | RESOLVED | Rafa Medina | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:37Z |
| FNMT: QC Statement that contains at least one of the ETSI ESI statements | 1625421 | RESOLVED | alain | [ca-compliance] | 2024-05-09T23:21:51Z |
| GDCA: Authentication of Organization Identity Failure for an OV Certificate | 1546253 | RESOLVED | capoc | [ca-compliance] [ov-misissuance] | 2023-02-22T18:15:25Z |
| GDCA: CRL validity period exceeds allowed value by one second | 1738191 | RESOLVED | capoc | [ca-compliance] [crl-failure] | 2023-02-22T18:15:26Z |
| GDCA: Delayed revocation of SSL/TLS certificates with Non-critical Basic Constraints | 1889062 | RESOLVED | capoc | [ca-compliance] [leaf-revocation-delay] | 2025-04-03T01:36:07Z |
| GDCA: Incorrect Value in organizationName Field | 1662382 | RESOLVED | capoc | [ca-compliance] [ev-misissuance] | 2023-02-22T18:15:29Z |
| GDCA: Insufficient Serial Number Entropy | 1536831 | RESOLVED | capoc | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:15:27Z |
| GDCA: Issuance of SSL/TLS certificates with Non-critical Basic Constraints | 1888060 | RESOLVED | capoc | [ca-compliance] [ov-misissuance] | 2025-03-05T18:51:43Z |
| GDCA: Misissuance of certificates with IP address | 1475563 | RESOLVED | Wayne Thayer | [ca-compliance] | 2022-11-14T22:22:57Z |
| GDCA: Misissuance of certificates with small RSA keys | 1467414 | RESOLVED | capoc | [ca-compliance] [dv-misissuance] | 2023-02-22T18:15:28Z |
| Globalsign / AlphaSSL: CAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN | 1420766 | RESOLVED | Linus Hallberg | [ca-compliance] | 2024-05-09T20:55:38Z |
| GlobalSign: 4 Misissued certificates with invalid CN | 1552586 | RESOLVED | douglas.beattie | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:25Z |
| GlobalSign: AT&T Insufficient Serial Number Entropy | 1535873 | RESOLVED | douglas.beattie | [ca-compliance] [ca-misissuance] [ov-misissuance] | 2023-02-22T18:16:26Z |
| GlobalSign: AT&T SSL certificates without the AIA extension | 1547691 | RESOLVED | douglas.beattie | [ca-compliance] [ca-misissuance] [ov-misissuance] | 2023-02-22T18:16:27Z |
| GlobalSign: Caching headers inaccurate for subset of CRLs | 1919304 | RESOLVED | Christophe Bonjean | [ca-compliance] [crl-failure] | 2024-10-23T16:46:45Z |
| GlobalSign: Certificate issued to FQDN with malformed CAA | 1759854 | RESOLVED | Christophe Bonjean | [ca-compliance] [dv-misissuance] | 2023-02-22T18:16:00Z |
| GlobalSign: Certificate issued with RSASSA-PSS public key | 1630870 | RESOLVED | Paul Brown | [ca-compliance] [dv-misissuance] | 2023-02-22T18:23:37Z |
| GlobalSign: Certificates with RSA keys where modulus is not divisible by 8 | 1654896 | RESOLVED | Arvid Vermote | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:13:04Z |
| GlobalSign: CRL contains invalid signature algorithm | 1793441 | RESOLVED | Christophe Bonjean | [ca-compliance] [crl-failure] | 2023-02-22T18:16:01Z |
| GlobalSign: CRLs reported in CCADB unavailable | 1829195 | RESOLVED | Christophe Bonjean | [ca-compliance] [disclosure-failure] | 2023-05-04T21:28:27Z |
| GlobalSign: Cross Certificate with non-conforming CABF Policy OIDs | 1650018 | RESOLVED | Arvid Vermote | [ca-compliance] [ca-misissuance] | 2023-02-22T18:13:05Z |
| Globalsign: Delayed revocation | 1942879 | RESOLVED | Christophe Bonjean | [ca-compliance] [leaf-revocation-delay] [external] | 2025-02-12T17:09:07Z |
| GlobalSign: Empty SingleExtension in OCSP responses | 1667944 | RESOLVED | Paul Brown | [ca-compliance] [ocsp-failure] | 2023-02-22T18:23:38Z |
| GlobalSign: EV certificate with wildcard domain in common name and SAN | 1782391 | RESOLVED | Christophe Bonjean | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:02Z |
| GlobalSign: EV certificates with serialNumber Government Entity and businessCategory Private Organization | 1744518 | RESOLVED | Paul Brown | [ca-compliance] [ev-misissuance] | 2023-02-22T18:23:39Z |
| GlobalSign: EV TLS certificate with only metadata in JOI State field | 1850091 | RESOLVED | Christophe Bonjean | [ca-compliance] [ev-misissuance] Next update 2023-10-02 | 2023-10-12T10:48:35Z |
| GlobalSign: Failure to provide a preliminary report within 24 hours | 1668005 | RESOLVED | Arvid Vermote | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:06Z |
| GlobalSign: Failure to revoke 2 noncompliant QWACs within 5 days | 1625445 | RESOLVED | Paul Brown | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:23:40Z |
| GlobalSign: Failure to revoke key-compromised certificate within 24 hours | 1639799 | RESOLVED | Arvid Vermote | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:13:07Z |
| GlobalSign: Failure to revoke noncompliant certificates within 5 days | 1654545 | RESOLVED | Arvid Vermote | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:13:08Z |
| GlobalSign: Failure to revoke noncompliant ICA within 7 days | 1651447 | RESOLVED | Arvid Vermote | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:13:10Z |
| GlobalSign: Failure to revoke noncompliant ICA within 7 days | 1599788 | RESOLVED | Arvid Vermote | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:13:09Z |
| GlobalSign: ICAs in CCADB, without EKU extension are listed in WTCA report but not in WTBR report | 1591005 | RESOLVED | Arvid Vermote | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:13:11Z |
| GlobalSign: Incapsula issued a certificate for non-existing domain (testslsslfeb20.me) | 1353833 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:16Z |
| GlobalSign: Incorrect Jurisdiction of Incorporation information for Japan | 1658932 | RESOLVED | Eva Van Steenberge | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:33Z |
| GlobalSign: Incorrect OCSP Delegated Responder Certificate | 1649937 | RESOLVED | douglas.beattie | [ca-compliance] [ocsp-failure] | 2023-02-22T18:16:29Z |
| GlobalSign: Incorrect RegNumber-Org Type combination | 1714968 | RESOLVED | Eva Van Steenberge | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:34Z |
| GlobalSign: Incorrect whois information for TLD | 1917896 | RESOLVED | Christophe Bonjean | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2025-03-18T00:08:40Z |
| GlobalSign: Invalid countryName | 1707073 | RESOLVED | Eva Van Steenberge | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:35Z |
| GlobalSign: Invalid stateOrProvinceName and locality pair | 1708834 | RESOLVED | Arvid Vermote | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:12Z |
| GlobalSign: Invalid stateOrProvinceName value | 1668007 | RESOLVED | Arvid Vermote | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:13:13Z |
| GlobalSign: IP in dnsName | 1524877 | RESOLVED | douglas.beattie | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:30Z |
| GlobalSign: Issuance of test certificate (pre-certificate) for EV SSL/QWAC with no EKU extension | 1836443 | RESOLVED | Christophe Bonjean | [ca-compliance] [ev-misissuance] | 2024-06-30T19:20:32Z |
| GlobalSign: Misissuance of QWAC Certificates | 1623356 | RESOLVED | douglas.beattie | [ca-compliance] [uncategorized] | 2023-02-22T18:16:31Z |
| GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields | 1390997 | RESOLVED | Linus Hallberg | [ca-compliance] [ev-misissuance] [ov-misissuance] [remediation-accepted] | 2023-02-22T18:21:35Z |
| GlobalSign: Non-BR-Compliant Certificate Issuance -- double-dots in dnsName | 1393555 | RESOLVED | Linus Hallberg | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:21:36Z |
| GlobalSign: Non-BR-Compliant Certificate Issuance -- RSA key smaller than 2048 bits | 1393557 | RESOLVED | Linus Hallberg | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] [ocsp-failure] | 2023-02-22T18:21:37Z |
| GlobalSign: OCSP responder certificates with more than 64 characters in CN | 1760311 | RESOLVED | Christophe Bonjean | [ca-compliance] [ocsp-failure] | 2023-02-22T18:16:03Z |
| GlobalSign: OCSP Responder Returns invalid values for Some Precertificates | 1579413 | RESOLVED | douglas.beattie | [ca-compliance] | 2022-11-14T22:22:57Z |
| GlobalSign: OCSP responders found to respond signed by the default CA when passed an invalid issuer in request | 1605372 | RESOLVED | douglas.beattie | [ca-compliance] [ocsp-failure] | 2023-02-22T18:16:33Z |
| GlobalSign: OCSP Status HTTP 530 | 1622505 | RESOLVED | Arvid Vermote | [ca-compliance] [ocsp-failure] | 2023-02-22T18:13:14Z |
| GlobalSign: Organization-validated SMIME certificate with invalid organizationIdentifier for European country | 1944815 | RESOLVED | Christophe Bonjean | [ca-compliance] [smime-misissuance] | 2025-02-26T15:51:30Z |
| GlobalSign: OV TLS certificate with incorrect countryName value for organization | 1934790 | RESOLVED | Christophe Bonjean | [ca-compliance] [ov-misissuance] | 2025-01-14T18:06:54Z |
| GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31 | 1690807 | RESOLVED | Eva Van Steenberge | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:36Z |
| GlobalSign: S/MIME Sponsor validated certificates with CommonName value equal to OrganizationName | 1866806 | RESOLVED | Christophe Bonjean | [ca-compliance] [smime-misissuance] | 2024-02-01T22:07:54Z |
| GlobalSign: SHA-256 hash algorithm used with ECC P-384 key | 1664328 | RESOLVED | Arvid Vermote | [ca-compliance] [ca-misissuance] | 2023-02-22T18:13:15Z |
| GlobalSign: SPKI lacks explicit NULL parameter, | 1554259 | RESOLVED | douglas.beattie | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:16:34Z |
| GlobalSign: SSL Certificates with US country code and invalid State/Prov | 1575880 | RESOLVED | douglas.beattie | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:35Z |
| GlobalSign: Three (3) revoked precertificates with reasonCode “certificateHold” | 1845803 | RESOLVED | Christophe Bonjean | [ca-compliance] [crl-failure] | 2023-09-08T20:17:16Z |
| GlobalSign: TLS OV Certificate containing unverified information | 1870276 | RESOLVED | Eva Van Steenberge | [ca-compliance] [ov-misissuance] | 2024-01-24T17:37:06Z |
| GlobalSign: Untimely revocation of TLS certificate after submission of private key compromise | 1620922 | RESOLVED | Arvid Vermote | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:13:16Z |
| GlobalSign: Use of Domain Validation Random Value for more than 30 days | 1654544 | RESOLVED | Arvid Vermote | [ca-compliance] [dv-misissuance] | 2023-02-22T18:13:17Z |
| GlobalSign: Virginia Tech Insufficient Serial Number Entropy | 1536760 | RESOLVED | douglas.beattie | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:36Z |
| GlobalSign: Wrong business category (Non Commercial Entity when should have been Private Organization) | 1599775 | RESOLVED | Eva Van Steenberge | [ca-compliance] [ev-misissuance] | 2023-02-22T18:17:32Z |
| GoDaddy : CAA checks did not properly handle issuewild tag allowing FQDN SANs to be added to wildcard certs | 1904748 | RESOLVED | [:nickname] Star | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2024-10-31T14:45:17Z |
| GoDaddy : CAA checks passed when records contained incorrect variants of godaddy.com or starfieldtech.com | 1904749 | RESOLVED | [:nickname] Star | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2024-10-31T14:45:50Z |
| GoDaddy: Document Reuse Issue | 1646226 | RESOLVED | Daniela Hood | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:00Z |
| GoDaddy: Does not provide a method for domain owners to revoke their certificates | 1924992 | RESOLVED | Steven Deitte | [ca-compliance] [policy-failure] [external] | 2025-04-03T01:34:03Z |
| GoDaddy: Action Items | 1341014 | RESOLVED | Kathleen Wilson | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:21:17Z |
| GoDaddy: Agreed-Upon Website Domain Validation Method Issue | 1647030 | RESOLVED | Daniela Hood | [ca-compliance] [dv-misissuance] | 2024-06-30T03:30:15Z |
| GoDaddy: Certificates issued with validity periods greater than 398-days | 1662807 | RESOLVED | Joanna | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:19:57Z |
| GoDaddy: CPR responses greater than 24 hours | 1734953 | RESOLVED | Brittany Randall | [ca-compliance] [policy-failure] | 2024-06-30T20:23:46Z |
| GoDaddy: CPR was not responded to in 24 hours | 1902868 | RESOLVED | Johnny | [ca-compliance] [policy-failure] | 2024-08-21T14:40:17Z |
| GoDaddy: CRL Issuer Mismatch | 1829024 | RESOLVED | daryn | [ca-compliance] [disclosure-failure] | 2023-05-05T20:09:23Z |
| GoDaddy: CRLs are version 1 and lack CRL Number extension | 1793642 | RESOLVED | Brittany Randall | [ca-compliance] [crl-failure] | 2023-01-15T18:11:01Z |
| GoDaddy: cross certificate disclosure to CCADB | 1572234 | RESOLVED | Joanna | [ca-compliance] [disclosure-failure] | 2023-02-22T18:19:58Z |
| GoDaddy: Delayed CRL File Updates | 1949895 | RESOLVED | Steven Deitte | [ca-compliance] [crl-failure] | 2025-05-13T20:13:16Z |
| GoDaddy: Delayed revocation | 1942877 | RESOLVED | Steven Deitte | [close on 2025-05-08] [ca-compliance] [leaf-revocation-delay] [external] | 2025-05-08T17:43:23Z |
| GoDaddy: Domain Validation Reuse Issue | 1605804 | RESOLVED | Joanna | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:19:59Z |
| GoDaddy: DV certificates with organizationalUnit field in subject | 1662810 | RESOLVED | Joanna | [ca-compliance] [dv-misissuance] | 2023-02-22T18:20:00Z |
| GoDaddy: Edge Case for Data Reuse Outside of Timeframes | 1909948 | RESOLVED | [:nickname] Star | [ca-compliance] [dv-misissuance] | 2024-10-31T14:46:04Z |
| GoDaddy: Expired CRLs | 1645832 | RESOLVED | Daniela Hood | [ca-compliance] [crl-failure] | 2023-02-22T18:17:02Z |
| GoDaddy: Failure to respond to January 2018 survey | 1439123 | RESOLVED | Daymion Reynolds | [ca-compliance] [disclosure-failure] | 2023-02-22T18:16:37Z |
| GoDaddy: Failure to revoke 210 subscriber certificates within 24 hours | 1793848 | RESOLVED | Brittany Randall | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:30Z |
| GoDaddy: Failure to revoke certificate with compromised key within 24 hours | 1640310 | RESOLVED | Daniela Hood | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:17:03Z |
| GoDaddy: Failure to revoke key-compromised certificates within 24 hours | 1639798 | RESOLVED | Joanna | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:20:01Z |
| GoDaddy: Failure to Revoke Subscriber Certificates within 24 hours | 1742657 | RESOLVED | Brittany Randall | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:31Z |
| GoDaddy: failure to revoke underscores | 1524815 | RESOLVED | Joanna | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:20:02Z |
| GoDaddy: Improper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString | 1462844 | RESOLVED | Daymion Reynolds | [ca-compliance] [ev-misissuance] | 2023-02-22T18:16:38Z |
| GoDaddy: improperly encoded certificate issued by Go Daddy Secure Certification Authority | 988633 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:18Z |
| GoDaddy: inconsistent disclosure of externally-operated intermediate | 1567061 | RESOLVED | Joanna | [ca-compliance] [disclosure-failure] | 2023-02-22T18:20:03Z |
| GoDaddy: Insufficient serial number entropy | 1533774 | RESOLVED | Joanna | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:20:04Z |
| GoDaddy: Intermittent unauthorized OCSP response when certificate is freshly issued | 1905419 | RESOLVED | [:nickname] Star | [ca-compliance] [ocsp-failure] | 2024-10-31T14:45:36Z |
| GoDaddy: Issued EV Wildcard Certificate | 1731939 | RESOLVED | Brittany Randall | [ca-compliance] [ev-misissuance] | 2023-02-22T18:14:32Z |
| GoDaddy: Issues with State and Country fields | 1577913 | RESOLVED | Joanna | [ca-compliance] [ev-misissuance] | 2023-02-22T18:20:05Z |
| GoDaddy: Misissuance of Cross Signed Certs | 1777128 | RESOLVED | Brittany Randall | [ca-compliance] [ca-misissuance] | 2023-02-22T18:14:33Z |
| GoDaddy: New GoDaddy incorrect issuance bug appears to be regression of 2010 issue | 1330482 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:20Z |
| GoDaddy: Non-BR-Compliant Certificate Issuance | 1391429 | RESOLVED | Daymion Reynolds | [ca-compliance] [dv-misissuance] | 2024-02-27T10:44:09Z |
| GoDaddy: OV Documentation Reuse | 1759959 | RESOLVED | Brittany Randall | [ca-compliance] [ov-misissuance] | 2023-02-22T18:14:34Z |
| GoDaddy: Random Value Vulnerability in Domain Validation Method | 1484766 | RESOLVED | Daymion Reynolds | [ca-compliance] [dv-misissuance] | 2024-06-30T03:31:10Z |
| GoDaddy: Reported TLS Certificate Private Key Exposure | 1742602 | RESOLVED | Brittany Randall | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:14:35Z |
| GoDaddy: Revocation process is unusable due to contact address not accepting attachments | 1942241 | RESOLVED | Steven Deitte | [ca-compliance] [policy-failure] [external] | 2025-05-13T20:15:24Z |
| GoDaddy: Root CRLs exceed maximum validity period by 1 second | 1734265 | RESOLVED | Brittany Randall | [ca-compliance] [crl-failure] | 2023-02-22T18:14:36Z |
| Google Trust Services: 63 bit serial numbers in some certificates | 1532842 | RESOLVED | ryan_hurst | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:05Z |
| Google Trust Services: Certificates not disclosed in CCADB | 1667844 | RESOLVED | Ryan Hurst | [ca-compliance] [disclosure-failure] | 2023-02-22T18:24:51Z |
| Google Trust Services: CRL handling of expired certificates not fully compliant with RFC 5280 Section 3.3 | 1581183 | RESOLVED | Andy Warner | [ca-compliance] [crl-failure] | 2023-02-22T18:13:20Z |
| Google Trust Services: CRL validity period set to expected value plus one second | 1731164 | RESOLVED | Cade Cairns | [ca-compliance] [crl-failure] | 2023-02-22T18:15:18Z |
| Google Trust Services: Delayed publication of CPS removing DNS Operator Exception | 1729097 | RESOLVED | Brett L | [ca-compliance] [policy-failure] | 2023-02-22T18:23:36Z |
| Google Trust Services: digitalSignature KeyUsage not set | 1652581 | RESOLVED | Andy Warner | [ca-compliance] [ca-misissuance] | 2023-02-22T18:13:21Z |
| Google Trust Services: Failure to properly validate IP address | 1876593 | RESOLVED | Google Trust Services | [ca-compliance] [dv-misissuance] | 2024-06-06T05:12:12Z |
| Google Trust Services: Failure to provide preliminary report within 24h | 1770510 | RESOLVED | Cade Cairns | [ca-compliance] [disclosure-failure] | 2023-05-04T21:31:12Z |
| Google Trust Services: Failure to provide regular and timely incident updates | 1708516 | RESOLVED | Andy Warner | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:23Z |
| Google Trust Services: Failure to respond to CPR within 24 hours | 1837519 | RESOLVED | Cade Cairns | [ca-compliance] [policy-failure] Next update 2023-Oct-27 | 2023-11-02T16:07:47Z |
| Google Trust Services: Failure to revoke subscriber certificates within BR timeframe | 1715421 | RESOLVED | Fotis Loukos | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:17:47Z |
| Google Trust Services: Failure to send preliminary report to subscriber within 24h | 1783272 | RESOLVED | kylepomalley | [ca-compliance] [policy-failure] | 2023-02-22T18:21:33Z |
| Google Trust Services: Forbidden Domain Validation Method 3.2.2.4.10 | 1706967 | RESOLVED | Andy Warner | [ca-compliance] [policy-failure] | 2023-02-22T18:13:24Z |
| Google Trust Services: Improper OCSP response for intermediate certificate | 1522975 | RESOLVED | kluge | [ca-compliance] [ocsp-failure] | 2023-02-22T18:21:05Z |
| Google Trust Services: Incorrect OCSP response for issued certificate | 1758372 | RESOLVED | Cade Cairns | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:20Z |
| Google Trust Services: Incorrect OCSP responses for certain certificates | 1773556 | RESOLVED | Cade Cairns | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:21Z |
| Google Trust Services: Incorrect OCSP responses for new ICAs under test | 1882904 | RESOLVED | Google Trust Services | [ca-compliance] [ocsp-failure] Next update 2024-04-26 | 2025-02-12T06:37:46Z |
| Google Trust Services: Incorrect revocation data temporarily served for GTS Y3 & Y4 | 1634795 | RESOLVED | Andy Warner | [ca-compliance] [crl-failure] [ocsp-failure] | 2023-02-22T18:13:25Z |
| Google Trust Services: incorrect SCT in certificate | 1815874 | RESOLVED | James Longmore | [ca-compliance] [dv-misissuance] | 2023-03-20T17:05:08Z |
| Google Trust Services: Invalid ASN.1 encoding of singleExtensions in OCSP responses | 1678183 | RESOLVED | Andy Warner | [ca-compliance] [ocsp-failure] | 2023-02-22T18:13:26Z |
| Google Trust Services: invalid CRL reason code | 1793467 | RESOLVED | Cade Cairns | [ca-compliance] [crl-failure] | 2023-02-22T18:15:22Z |
| Google Trust Services: invalid curve-hash combination | 1612389 | RESOLVED | Andy Warner | [ca-compliance] [ca-misissuance] | 2023-02-22T18:13:27Z |
| Google Trust Services: Invalid OCSP responses | 1630079 | RESOLVED | Andy Warner | [ca-compliance] [ocsp-failure] | 2023-02-22T18:13:28Z |
| Google Trust Services: Mis-issued certificates for citi.com subdomain due to lack of CAA record checking | 1809864 | RESOLVED | James Longmore | [ca-compliance] [dv-misissuance] | 2024-05-09T23:21:26Z |
| Google Trust Services: New hire onboarding deviation from written procedure | 1931413 | RESOLVED | Google Trust Services | [ca-compliance] [policy-failure] | 2024-12-27T23:25:57Z |
| Google Trust Services: OCSP responses not published in a timely manner | 1771552 | RESOLVED | Cade Cairns | [ca-compliance] [ocsp-failure] | 2023-02-22T18:15:24Z |
| Google Trust Services: OCSP serving issue 2020-04-09 | 1630040 | RESOLVED | Andy Warner | [ca-compliance] [ocsp-failure] | 2023-02-22T18:13:29Z |
| Google Trust Services: Out-of-date CPS disclosure | 1706976 | RESOLVED | Andy Warner | [ca-compliance] | 2022-11-14T22:22:57Z |
| Google Trust Services: Revocation data publication delay for revoked unused subordinate CAs | 1838707 | RESOLVED | Nick Naziridis | [ca-compliance] Next update 2023-07-28 | 2023-07-28T22:11:25Z |
| Google Trust Services: Self-audit tooling MPIC perspective verification inconsistency | 1948368 | RESOLVED | Google Trust Services | [ca-compliance] [uncategorized] | 2025-03-14T16:57:30Z |
| Google Trust Services: Signing SHA-1 Hash for existing CA certificate with changes in Key Usage | 1709223 | RESOLVED | Ryan Hurst | [ca-compliance] [ca-misissuance] | 2023-02-22T18:24:52Z |
| Google Trust Services: SXG certificates issued without correctly checking CAA restrictions | 1902670 | RESOLVED | Google Trust Services | [ca-compliance] [uncategorized] | 2024-07-31T18:31:10Z |
| Google Trust Services: Tracking bug for possible audit delays (audit due 2020-12) | 1625498 | RESOLVED | kluge | [ca-compliance] [audit-delay] [covid-19] | 2022-11-14T22:22:57Z |
| Google Trust Services: uses "DNSSec-mostly" and DTPs for DNS resolution | 1873739 | RESOLVED | Google Trust Services | [ca-compliance] [uncategorized] [external] | 2024-02-09T18:18:32Z |
| GRCA: ALV failures on intermediate certificates | 1614448 | RESOLVED | National Development Council | [ca-compliance] [audit-failure] | 2024-06-30T19:45:39Z |
| GRCA: Misissued certificates - invalid CN, bad validity period, missing extensions | 1523221 | RESOLVED | National Development Council | [ca-compliance] [uncategorized] | 2023-02-22T18:18:05Z |
| GRCA: Misissued certificates: Invalid commonName, commonName not in SAN | 1463975 | RESOLVED | National Development Council | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:06Z |
| GRCA: Signing SHA-1 OCSP responses with unconstrained certificate | 1397832 | RESOLVED | National Development Council | [ca-compliance] [ocsp-failure] | 2023-02-22T18:18:07Z |
| HARICA: 3 EV TLS Certificates without L or ST | 1597135 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ev-misissuance] | 2023-02-22T18:20:07Z |
| HARICA: Anomaly in OCSP services after CA software upgrade | 1878106 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ocsp-failure] | 2024-03-08T15:19:58Z |
| HARICA: Certificates with invalid policy tree | 1699796 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:08Z |
| HARICA: delayed revocation for bug 1943596 | 1945389 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [leaf-revocation-delay] | 2025-05-01T14:09:37Z |
| HARICA: Delayed revocation for non-BR-compliant CA Certificates within 7 days | 1651465 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:20:09Z |
| HARICA: Incorrect OCSP Delegated Responder Certificate | 1649945 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ocsp-failure] | 2023-02-22T18:20:10Z |
| HARICA: Insufficient serial number entropy | 1535509 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:11Z |
| HARICA: OCSP Responder Returned "Unauthorized" for Some Precertificates | 1580393 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] | 2022-11-14T22:22:57Z |
| HARICA: P-384,ecdsa-with-SHA256 Certificates | 1530971 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ca-misissuance] | 2023-02-22T18:20:13Z |
| HARICA: S/MIME certificate issuance with incorrect commonName | 1943596 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [smime-misissuance] | 2025-05-01T14:10:12Z |
| HARICA: S/MIME certificate issuance without proper validation | 1942130 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [smime-misissuance] | 2025-05-01T14:09:59Z |
| HARICA: subject:organizationIdentifier using VATEL as a prefix for tax identifier | 1872374 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ev-misissuance] | 2024-01-24T17:37:24Z |
| HARICA: TLS Server certificate issuance without proper validation | 1943604 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ov-misissuance] | 2025-05-25T18:26:59Z |
| HARICA: wrong characters in NC extension of Technically Constrained Intermediate CA Certificates | 1535772 | RESOLVED | Dimitris Zacharopoulos | [ca-compliance] [ca-misissuance] | 2023-02-22T18:20:14Z |
| Hongkong Post / Certizen: Failure to report misissuance | 1520299 | RESOLVED | Man Ho | [ca-compliance] [policy-failure] | 2023-02-22T18:21:50Z |
| Hongkong Post: Delayed response to CPR | 1886722 | RESOLVED | Man Ho | [ca-compliance] [policy-failure] | 2024-08-28T21:36:57Z |
| Hongkong Post: Delayed revocation of TLS certificates with basicConstraints not marked as critical | 1887888 | RESOLVED | Man Ho | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-28T15:37:04Z |
| Hongkong Post: Delayed revocation of TLS certificates with Certificate Policies extension problem | 1886665 | RESOLVED | Man Ho | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-28T15:36:47Z |
| Hongkong Post: Invalid EV cert businessCategory | 1836694 | RESOLVED | Man Ho | [ca-compliance] [ev-misissuance] | 2023-09-29T15:35:32Z |
| Hongkong Post: Subject CN converted to Unicode representation incident | 1804843 | RESOLVED | Man Ho | [ca-compliance] [ov-misissuance] | 2023-04-19T22:25:15Z |
| Hongkong Post: TLS certificates with basicConstraints not marked as critical | 1887008 | RESOLVED | Man Ho | [ca-compliance] [ov-misissuance] | 2024-08-28T21:35:55Z |
| Hongkong Post: TLS certificates with Certificate Policies extension that does not assert http scheme | 1886406 | RESOLVED | Man Ho | [ca-compliance] [ov-misissuance] | 2024-08-28T21:36:09Z |
| ICP-Brasil: Mis-issued certificate | 1934361 | RESOLVED | Ben Wilson | [ca-compliance] [ov-misissuance] | 2025-02-14T17:06:33Z |
| IdenTrust: Approval of TLS certificate renewal without domain validation | 1930029 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2025-02-19T18:16:03Z |
| IdenTrust: Bad OCSP Responses | 1806728 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-05-05T20:09:41Z |
| IdenTrust: basicConstraints not flagged "Critical" Per Certification Practices Statement | 1850807 | RESOLVED | IdenTrust | [ca-compliance] [policy-failure] | 2023-09-29T15:35:19Z |
| IdenTrust: Certificate with missing details flagged by OCSP Watch | 1838315 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] Next update 2023-09-30 | 2023-10-12T10:25:58Z |
| IdenTrust: Certificates with Invalid values for stateOrProvinceName | 1718552 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:33Z |
| IdenTrust: CRL Potential Publication Delay due to Cache | 1775454 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2023-02-22T18:25:32Z |
| IdenTrust: Delay beyond 5 days in revoking misissued certificates | 1851710 | RESOLVED | IdenTrust | [ca-compliance] [leaf-revocation-delay] | 2024-01-04T20:52:39Z |
| IdenTrust: Delay Revocation for EV SSL Certificates | 1757247 | RESOLVED | IdenTrust | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:25:34Z |
| IdenTrust: Discrepancy in values of address fields within CN of SSL Certificates | 1526099 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:35Z |
| IdenTrust: duplicate Certificate in error flagged by OCSP Watch | 1831004 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2024-05-09T19:13:23Z |
| IdenTrust: EV TLS certificate with invalid Jurisdiction state for government entity | 1756261 | RESOLVED | IdenTrust | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:36Z |
| IdenTrust: EV TLS certificate with wrong jurisdiction state for private organization | 1756850 | RESOLVED | IdenTrust | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:37Z |
| IdenTrust: Expired CRL served | 1870402 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2024-06-30T18:38:39Z |
| IdenTrust: Expired CRLs | 1792111 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2023-02-22T18:25:30Z |
| IdenTrust: Expired CRLs | 1914067 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2024-10-23T16:46:23Z |
| IdenTrust: Expired ICAs CRLs | 1854465 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2023-11-02T16:07:11Z |
| IdenTrust: Failure to disclose Unconstrained intermediate Within 7 Days | 1542082 | RESOLVED | IdenTrust | [ca-compliance] [disclosure-failure] | 2023-02-22T18:25:38Z |
| IdenTrust: Failure to provide OCSP responses for valid ICA certificates | 1758213 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:39Z |
| IdenTrust: Failure to Revoke Subscriber Certificates Within 5 days | 1736706 | RESOLVED | IdenTrust | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:25:40Z |
| IdenTrust: Improper encoding of wildcard certificate | 1446121 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:41Z |
| IdenTrust: Inaccurate CRL Details in CCADB | 1818833 | RESOLVED | IdenTrust | [ca-compliance] [disclosure-failure] | 2023-03-20T17:04:44Z |
| IdenTrust: Inconsistent Disclosure of Externally-Operated Intermediate | 1671410 | RESOLVED | IdenTrust | [ca-compliance] [disclosure-failure] | 2024-06-30T02:08:37Z |
| IdenTrust: Incorrect response for OCSP validation | 1933353 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2025-03-21T13:36:44Z |
| IdenTrust: Incorrect Subject Details for HydrantId | 1635279 | RESOLVED | IdenTrust | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:42Z |
| IdenTrust: Intermitent interruptions to DNS service | 1734906 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2023-02-22T18:25:31Z |
| IdenTrust: Intermittent issuance/validation failures and website outage | 1778788 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] [crl-failure] | 2023-02-22T18:25:27Z |
| IdenTrust: Internal names / failure to report | 1500593 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:43Z |
| IdenTrust: Invalid OCSP Response Held in Cache | 1678410 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:44Z |
| IdenTrust: Invalid OrganizationIdentifier in S/MIME certificates | 1900492 | RESOLVED | IdenTrust | [ca-compliance] [smime-misissuance] | 2024-06-21T16:12:22Z |
| IdenTrust: Invalid special characters in S/MIME Certificates | 1910195 | RESOLVED | IdenTrust | [ca-compliance] [smime-misissuance] | 2024-09-06T15:14:36Z |
| IdenTrust: Issuance of certificates greater than 398 days | 1663080 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:45Z |
| IdenTrust: Issuance of OV SSL Certificate with doc vetting older than 398 days | 1744627 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:46Z |
| IdenTrust: Issuance of Subordinate CA’s Without EKU | 1669594 | RESOLVED | IdenTrust | [ca-compliance] [ca-misissuance] | 2023-02-22T18:25:47Z |
| IdenTrust: Mis-Issued EV Certificates | 1734917 | RESOLVED | IdenTrust | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:48Z |
| IdenTrust: Mis-Issued EV Code Signing Certificate | 1796715 | RESOLVED | IdenTrust | [ca-compliance] [uncategorized] | 2023-02-22T18:25:49Z |
| IdenTrust: Missing Revocation Reasons in CRL | 1794047 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2023-02-22T18:25:28Z |
| IdenTrust: Missing Thumbprints for Intermediate CA certificates In Some Annual Audit Reports | 1588213 | RESOLVED | IdenTrust | [ca-compliance] [audit-failure] | 2024-06-30T20:08:31Z |
| IdenTrust: Non-BR-Compliant Certificate Issuance | 1391000 | RESOLVED | Vishvas Patel | [ca-compliance] [ca-misissuance] [ev-misissuance] [disclosure-failure] | 2023-02-22T18:28:03Z |
| IdenTrust: Non-BR-Compliant OCSP Responders | 1398255 | RESOLVED | Vishvas Patel | [ca-compliance] [ocsp-failure] | 2023-02-22T18:28:04Z |
| IdenTrust: OCSP Outage | 1636544 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:52Z |
| IdenTrust: OCSP Responder missing id-pkix-ocsp-nocheck | 1653680 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:53Z |
| IdenTrust: OCSP responses for subordinate CA exceed the validity period per CPS guidelines | 1772633 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:54Z |
| IdenTrust: OCSP Signer Certificate Missing No-Check Extension | 1749089 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:55Z |
| IdenTrust: Pre-certificates without a final certificate showing OCSP error | 1758027 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:56Z |
| IdenTrust: S/MIME certificates issued in violation of New S/MIME Baseline Requirements v1.0 | 1853783 | RESOLVED | IdenTrust | [ca-compliance] [smime-misissuance] | 2025-03-20T05:59:40Z |
| IdenTrust: Service Degradation | 1677239 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:57Z |
| IdenTrust: Temporarily Expired CRLs | 1853447 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] Next update 2023-10-02 | 2023-10-12T10:26:30Z |
| IdenTrust: Temporary Errors in Test Website Certificates | 1883792 | RESOLVED | IdenTrust | [ca-compliance] [policy-failure] | 2024-06-30T19:12:54Z |
| IdenTrust: test certificates inadvertently published in production environment | 1876871 | RESOLVED | IdenTrust | [ca-compliance] [smime-misissuance] [ov-misissuance] | 2024-06-30T19:21:55Z |
| IdenTrust: TLS Certificates with outdated certificate profile | 1919162 | RESOLVED | IdenTrust | [ca-compliance] [ov-misissuance] | 2024-12-09T14:17:06Z |
| IdenTrust: TLS ICA with User Notice in Policy Qualifier | 1897569 | RESOLVED | IdenTrust | [ca-compliance] [ca-misissuance] | 2024-08-23T15:35:08Z |
| IdenTrust: Unauthorized OCSP response on a Timestamp certificate | 1905446 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] | 2024-12-09T14:15:59Z |
| IdenTrust: Unavailable CRL and OCSP Responders | 1754593 | RESOLVED | IdenTrust | [ca-compliance] [ocsp-failure] [crl-failure] | 2023-02-22T18:25:58Z |
| IdenTrust: Unavailable CRL for IdenTrust ‘DST Root CA X3’. | 1709192 | RESOLVED | IdenTrust | [ca-compliance] [crl-failure] | 2023-02-22T18:25:59Z |
| IdenTrust: Undisclosed Unrevoked ICAs | 1598807 | RESOLVED | IdenTrust | [ca-compliance] [disclosure-failure] [ca-revocation-delay] [covid-19] | 2023-02-22T18:26:00Z |
| IdenTrust: unintended creation of a Root CA certificate | 1895006 | RESOLVED | IdenTrust | [ca-compliance] [ca-misissuance] | 2024-08-23T15:34:51Z |
| IdenTrust: Validation Source for EV Certificates not Publicly Disclosed | 1753287 | RESOLVED | IdenTrust | [ca-compliance] [ev-misissuance] | 2024-07-08T21:40:25Z |
| IP certificate issued with Domain Validation | 1550547 | RESOLVED | Wayne Thayer | [ca-compliance] | 2022-11-14T22:22:57Z |
| iTrusChina: CPR was not responded to within 24 hours | 1927675 | RESOLVED | iTrusChina Co.,Ltd. | [ca-compliance] [policy-failure] | 2024-12-02T18:08:38Z |
| iTrusChina: CRL Reason Codes | 1907949 | RESOLVED | iTrusChina Co.,Ltd. | [ca-compliance] [crl-failure] [external] | 2024-08-28T21:30:48Z |
| iTrusChina: Failure to Respond to May 2022 Survey | 1772412 | RESOLVED | iTrusChina Co.,Ltd. | [ca-compliance] [disclosure-failure] | 2023-03-20T15:03:39Z |
| iTrusChina: Issuance of certificates using keys previously reported as compromised | 1927384 | RESOLVED | iTrusChina Co.,Ltd. | [ca-compliance] [ov-misissuance] | 2025-01-29T04:10:59Z |
| iTrusChina: lacking 2018 KGC and GAP period audit report | 1923279 | RESOLVED | iTrusChina Co.,Ltd. | [ca-compliance] [audit-failure] | 2025-03-17T23:52:55Z |
| iTrusChina: verification errors for the roots' CRLs(ARL) | 1712664 | RESOLVED | iTrusChina Co.,Ltd. | [ca-compliance] [crl-failure] | 2023-02-22T18:28:06Z |
| Izenpe: certificate issued to internal domain | 1651026 | RESOLVED | Oscar Garcia | [ca-compliance] [ev-misissuance] | 2023-02-22T18:23:23Z |
| Izenpe: Certificates not disclosed in CCADB | 1667846 | RESOLVED | Oscar Garcia | [ca-compliance] | 2022-11-14T22:22:57Z |
| Izenpe: CRL and ARL exceed validity period value by one second | 1738421 | RESOLVED | David | [ca-compliance] [crl-failure] | 2023-02-22T18:16:10Z |
| Izenpe: Duplicate attribute in Subject | 1921254 | RESOLVED | David | [ca-compliance] [ev-misissuance] | 2025-02-19T18:17:03Z |
| Izenpe: EV certificate with various issues | 1267049 | RESOLVED | Kathleen Wilson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:21:21Z |
| Izenpe: Failure to provide a preliminary report within 24 hours. | 1647121 | RESOLVED | Oscar Garcia | [ca-compliance] [disclosure-failure] | 2023-02-22T18:23:24Z |
| Izenpe: Failure to revoke within 5 days | 1656487 | RESOLVED | Oscar Garcia | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:23:25Z |
| Izenpe: Failure to Submit Annual CCADB Self-Assessment | 1883493 | RESOLVED | David | [ca-compliance] [disclosure-failure] [external] | 2025-02-19T18:15:34Z |
| Izenpe: Incorrect Unicode characters in Subject | 1945867 | RESOLVED | David | [ca-compliance] [ov-misissuance] | 2025-04-18T15:32:11Z |
| Izenpe: incorrect value in stateOrProvinceName | 1653284 | RESOLVED | Oscar Garcia | [ca-compliance] [ev-misissuance] | 2023-02-22T18:23:27Z |
| Izenpe: Intermediate CA certificates not listed in audit report | 1596744 | RESOLVED | Oscar Garcia | [ca-compliance] [audit-failure] | 2024-06-30T20:08:48Z |
| Izenpe: intermediate certificates not revoked within BR time period | 1598608 | RESOLVED | Oscar Garcia | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:23:28Z |
| Izenpe: Multiple invalid EV certificates issued | 1559765 | RESOLVED | Oscar Garcia | [ca-compliance] [ev-misissuance] | 2023-02-22T18:23:29Z |
| Izenpe: Multiple sub CAs with incorrectly encoded SubjectPublicKeyInfo algorithm | 1685767 | RESOLVED | Oscar Garcia | [ca-compliance] [ca-misissuance] | 2023-02-22T18:23:30Z |
| Izenpe: Non-BR-Compliant Certificate Issuance | 1391054 | RESOLVED | Oscar Garcia | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:23:31Z |
| Izenpe: Non-BR-Compliant OCSP Responders | 1398258 | RESOLVED | Oscar Garcia | [ca-compliance] [ocsp-failure] | 2023-02-22T18:23:32Z |
| Izenpe: Not allowed Qualifier ID OID on Certificate Policies extension | 1876565 | RESOLVED | David | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2024-04-06T02:31:35Z |
| Izenpe: Not allowed Qualifier ID OID on Certificate Policies extension of Precertificates | 1922844 | RESOLVED | David | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2025-03-17T23:25:59Z |
| Izenpe: OU > 64 characters | 1528290 | RESOLVED | Oscar Garcia | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:33Z |
| Kamu SM: "Some-State" in stateOrProvinceName | 1551369 | RESOLVED | Melis Şimşek | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:53Z |
| KAMU SM: commonName not in SAN | 1847193 | RESOLVED | Melis Şimşek | [ca-compliance] [ov-misissuance] | 2023-09-29T15:36:29Z |
| Kamu SM: Insufficient Serial Number Entropy | 1539190 | RESOLVED | Melis Şimşek | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:54Z |
| Kamu SM: Non-BR-Compliant Certificate Issuance | 1390998 | RESOLVED | Tuğba ÖZCAN | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:43Z |
| KIR S.A.: Certificates issued greater than stated in CPS | 1708965 | RESOLVED | Piotr Grabowski | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:19Z |
| KIR S.A.: Certificates issued with multiple BR violations | 1495497 | RESOLVED | Piotr Grabowski | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:24:20Z |
| KIR S.A.: CN domain not in SAN | 1705187 | RESOLVED | Piotr Grabowski | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:21Z |
| KIR S.A.: CP/CPS contains noncompliant DV method, does not specify CAA domains | 1705904 | RESOLVED | Piotr Grabowski | [ca-compliance] [policy-failure] | 2023-02-22T18:24:23Z |
| KIR S.A.: Delayed revocations of certificates | 1709872 | RESOLVED | Piotr Grabowski | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:24:24Z |
| KIR S.A.: DV certificates with locality name, organization name and stateOrProvinceName | 1705832 | RESOLVED | Piotr Grabowski | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:25Z |
| KIR S.A.: Invalid localityName + CRL Revoked but OCSP Unknown | 1705337 | RESOLVED | Piotr Grabowski | [ca-compliance] [ocsp-failure] | 2023-02-22T18:24:26Z |
| KIR S.A.: Invalid organizationName | 1705647 | RESOLVED | Piotr Grabowski | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:27Z |
| KIR S.A.: Many certificates with OCSP Unknown | 1705657 | RESOLVED | Piotr Grabowski | [ca-compliance] [ocsp-failure] | 2023-02-22T18:24:28Z |
| KIR S.A.: Misissuance - missing OCSP AIA, Validity > 825 days | 1523186 | RESOLVED | Piotr Grabowski | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:29Z |
| KIR S.A.: O > 64 characters | 1532112 | RESOLVED | Piotr Grabowski | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:30Z |
| KIR: Delayed revocation within seven (7) days for bug 1921598 | 1922572 | RESOLVED | Piotr Grabowski | [ca-compliance] [ca-revocation-delay] | 2025-05-08T17:53:48Z |
| KIR: Failure to disclose intermediate certificate within 7 days in ccadb | 1921596 | RESOLVED | Piotr Grabowski | [ca-compliance] [disclosure-failure] | 2025-02-19T18:16:34Z |
| KIR: Intermediate CA - SZAFIR Trusted CA3 - Certificate Policies extension - non-compliance | 1921598 | RESOLVED | Piotr Grabowski | [ca-compliance] [ca-misissuance] | 2025-02-19T18:16:18Z |
| KIR: Intermediate CA - SZAFIR Trusted CA4 - Certificate Policies extension - non-compliance | 1921597 | RESOLVED | Piotr Grabowski | [ca-compliance] [ca-misissuance] | 2025-02-19T18:16:46Z |
| Let's Encrypt: 2019.08.20 Incident: Incorrect OCSP responses under certain conditions | 1576789 | RESOLVED | Josh Aas | [ca-compliance] [ocsp-failure] | 2024-05-09T23:25:12Z |
| Let's Encrypt: 302 total OCSP responses available beyond acceptable timelines | 1666047 | RESOLVED | Kiel C | [ca-compliance] [ocsp-failure] | 2023-02-22T18:20:55Z |
| Let's Encrypt: CAA Misissuances | 1398427 | RESOLVED | Josh Aas | [ca-compliance] [dv-misissuance] | 2023-02-22T18:18:48Z |
| Let's Encrypt: CAA Rechecking bug | 1619047 | RESOLVED | Jacob Hoffman-Andrews | [ca-compliance] [dv-misissuance] | 2023-02-22T18:20:47Z |
| Let's Encrypt: Case-sensitive CAA tag processing | 1462735 | RESOLVED | Josh Aas | [ca-compliance] [uncategorized] | 2023-02-22T18:18:49Z |
| Let's Encrypt: certificate lifetimes 90 days plus one second | 1715455 | RESOLVED | Josh Aas | [ca-compliance] [dv-misissuance] | 2024-01-10T13:38:25Z |
| Let's Encrypt: Certificates issued to Elliptic Curve Debian Weak Keys | 1789521 | RESOLVED | Andrew Gabbitas | [ca-compliance] [dv-misissuance] | 2024-05-09T23:24:57Z |
| Let's Encrypt: certs issued contrary to CPS due to incomplete blocklist | 1319609 | RESOLVED | Kathleen Wilson | [ca-compliance] [dv-misissuance] | 2023-02-22T18:21:22Z |
| Let's Encrypt: Delay updating OCSP responses | 1729567 | RESOLVED | Aaron Gable | [ca-compliance] [ocsp-failure] | 2023-02-22T18:10:11Z |
| Let's Encrypt: Delayed revocation for removed gTLD | 1795483 | RESOLVED | James Renken | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:19:02Z |
| Let's Encrypt: Duplicate Serial Numbers | 1838667 | RESOLVED | Jacob Hoffman-Andrews | [ca-compliance] [dv-misissuance] Next update 2023-07-27 | 2023-07-05T19:33:50Z |
| Let's Encrypt: Early CRL Removal Incident | 1954861 | RESOLVED | Ameer Ghani | [ca-compliance] [crl-failure] | 2025-04-09T18:43:07Z |
| Let's Encrypt: End Entity CRLs Not Reissued On Time | 1799755 | RESOLVED | J.C. Jones [:jcj] (he/they) | [ca-compliance] [crl-failure] | 2024-05-09T23:24:49Z |
| Let's Encrypt: Expired ISRG Root OCSP X1 Certificate | 1645276 | RESOLVED | Andrew Gabbitas | [ca-compliance] [ocsp-failure] | 2023-02-22T18:12:03Z |
| Let's Encrypt: Failure to audit log subscriber certificate OCSP updates | 1684112 | RESOLVED | Andrew Gabbitas | [ca-compliance] [ocsp-failure] | 2023-02-22T18:12:04Z |
| Let's Encrypt: Failure to provide OCSP Responses for some certificates | 1753123 | RESOLVED | Aaron Gable | [ca-compliance] [ocsp-failure] | 2023-01-04T17:50:21Z |
| Let's Encrypt: Failure to revoke for Certificate Lifetime Incident | 1715672 | RESOLVED | Aaron Gable | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:10:13Z |
| Let's Encrypt: Failure to revoke key-compromised certificate within 24 hours | 1639794 | RESOLVED | Jacob Hoffman-Andrews | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:20:48Z |
| Let's Encrypt: Failure to revoke key-compromised certificates within 24 hours | 1625322 | RESOLVED | Josh Aas | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:18:51Z |
| Let's Encrypt: Failure to revoke key-compromised certificates within 24 hours | 1627614 | RESOLVED | Josh Aas | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:18:52Z |
| Let's Encrypt: Improper encoding of wildcard certificates | 1446080 | RESOLVED | Josh Aas | [ca-compliance] [dv-misissuance] | 2023-02-22T18:18:53Z |
| Let's Encrypt: Incomplete and Inconsistent CRLs | 1793114 | RESOLVED | Aaron Gable | [ca-compliance] [crl-failure] | 2023-02-22T18:11:50Z |
| Let's Encrypt: Incomplete revocation for CAA rechecking bug | 1619179 | RESOLVED | Josh Aas | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:18:54Z |
| Let's Encrypt: intent to issue root and intermediate certificates with organizationName and CABF DV OID | 1658437 | RESOLVED | Josh Aas | [ca-compliance] | 2024-05-09T19:16:46Z |
| Let's Encrypt: Issuance for Invalid Internationalized Domain Name | 1966515 | RESOLVED | Aaron Gable | [close on 2025-06-03] [ca-compliance] [uncategorized] | 2025-06-04T21:20:26Z |
| Let's Encrypt: keyCompromise key blocking deviation from CP/CPS | 1886876 | RESOLVED | J.C. Jones [:jcj] (he/they) | [ca-compliance] [policy-failure] | 2024-04-17T17:38:31Z |
| Let's Encrypt: Mis-issued certificates related to SC48v2 | 1735247 | RESOLVED | Jillian | [ca-compliance] [dv-misissuance] | 2023-02-22T18:20:15Z |
| Let's Encrypt: No Meaningful Subject Distinguished Name | 1921573 | RESOLVED | Preston Locke | [ca-compliance] [dv-misissuance] | 2024-11-06T17:12:40Z |
| Let's Encrypt: Non-BR-Compliant Certificate Issuance | 1391867 | RESOLVED | Josh Aas | [ca-compliance] [dv-misissuance] | 2023-02-22T18:18:55Z |
| Let's Encrypt: OCSP "unauthorized" responses | 1486650 | RESOLVED | Josh Aas | [ca-compliance] [ocsp-failure] | 2023-02-22T18:18:56Z |
| Let's Encrypt: OCSP Responder Returned "Unauthorized" for Some Precertificates | 1577652 | RESOLVED | Jacob Hoffman-Andrews | [ca-compliance] | 2022-11-14T22:22:57Z |
| Let's Encrypt: OCSP responses with no revocationReason | 1648840 | RESOLVED | Jacob Hoffman-Andrews | [ca-compliance] [ocsp-failure] | 2023-02-22T18:20:50Z |
| Let's Encrypt: Potential Denial of Service against websites with broad private key reuse | 1742704 | RESOLVED | Ben Wilson | [ca-compliance] [uncategorized] | 2024-05-09T19:15:02Z |
| Let's Encrypt: TLS Using ALPN Allows Additional Identifiers in Challenge Certificate | 1752670 | RESOLVED | Jillian | [ca-compliance] [dv-misissuance] | 2024-05-09T23:25:04Z |
| Let's Encrypt: TLS Using ALPN TLS Version and OID | 1751984 | RESOLVED | Aaron Gable | [ca-compliance] [dv-misissuance] | 2023-02-22T18:11:51Z |
| LuxTrust: Outdated audit statement for intermediate certificate | 1578505 | RESOLVED | ca | [ca-compliance] [audit-failure] | 2024-06-30T20:09:07Z |
| LuxTrust: Overdue Audit Statements 2019 | 1566580 | RESOLVED | Yves Nullens | [ca-compliance] Overdue Audits for root certs | 2022-11-14T22:22:57Z |
| Microsec: ALV Failures | 1625767 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [audit-failure] | 2024-06-30T19:45:59Z |
| Microsec: Certificate validity period greater than 398 days | 1676352 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:02Z |
| Microsec: Delayed revocation of the misissued certificates | 1887110 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-14T17:04:41Z |
| Microsec: Disallowed subject attribute field in DV certificate | 1889699 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [dv-misissuance] | 2024-08-28T21:34:58Z |
| Microsec: Expired Certificates on test Pages for Revocation | 1925239 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [policy-failure] | 2025-01-14T18:07:12Z |
| Microsec: Failure to revoke noncompliant ICA within 7 days | 1651632 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:27:05Z |
| Microsec: Findings in 2023 Audit | 1865880 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [audit-finding] | 2024-02-14T21:24:46Z |
| MICROSEC: Incident report - No OCSP status response for 2 Precertificates | 1844514 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ocsp-failure] | 2024-03-13T12:35:39Z |
| Microsec: Inconsistent Disclosure of S/MIME BR Audit Information in CCADB | 1952519 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [disclosure-failure] | 2025-05-08T17:51:44Z |
| Microsec: Incorrect OCSP Delegated Responder Certificate | 1649947 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ocsp-failure] | 2023-02-22T18:27:06Z |
| Microsec: Issuance of 2 IVCP precertificates without givenName, surName, localityName fields | 1622539 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:07Z |
| Microsec: Late response to a CPR | 1886998 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [policy-failure] | 2024-08-28T21:32:49Z |
| Microsec: Misissuance an EV TLS certificate without CPSuri | 1886257 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ev-misissuance] | 2024-08-28T21:32:32Z |
| Microsec: Misissuance of one OV certificate with Key Usage KeyEncipherment | 1728384 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:08Z |
| Microsec: Non-BR-Compliant Certificate Issuance | 1391055 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:03Z |
| Microsec: Validity period greater than 825 days | 1512270 | RESOLVED | dr. Sándor SZŐKE | [ca-compliance] [uncategorized] | 2023-02-22T18:27:09Z |
| Microsoft DSRE PKI: OCSP responders found to respond signed by the default CA when passed an invalid issuer in request | 1620727 | RESOLVED | u654666 | [ca-compliance] [ocsp-failure] | 2023-02-22T18:16:55Z |
| Microsoft DSRE PKI: problem reporting e-mail in CPS does not work | 1604124 | RESOLVED | u654666 | [ca-compliance] [policy-failure] | 2023-02-22T18:16:56Z |
| Microsoft PKI Services: "unknown" OCSP response for issued certificates | 1793443 | RESOLVED | John Mason | [ca-compliance] [ocsp-failure] | 2024-05-09T23:28:02Z |
| Microsoft PKI Services: 3-Month Access Review Process Failure | 1848280 | RESOLVED | u654666 | [ca-compliance] [policy-failure] Next update 2023-10-23 | 2023-10-12T10:24:57Z |
| Microsoft PKI Services: CA Certificates not published in DER Encoded Format | 1884461 | RESOLVED | u654666 | [ca-compliance] [policy-failure] | 2024-05-20T04:13:20Z |
| Microsoft PKI Services: Certificate Mis-Issuance, DNSName is not FQDN, Preferred Name Syntax | 1706860 | RESOLVED | John Mason | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:20Z |
| Microsoft PKI Services: Certificate Mis-Issuance, DNSNames must have a valid TLD | 1670337 | RESOLVED | John Mason | [ca-compliance] [ov-misissuance] | 2024-01-16T01:00:23Z |
| Microsoft PKI Services: Certificate Mis-Issuance, Locality Missing | 1644936 | RESOLVED | John Mason | [ca-compliance] [ca-misissuance] | 2024-05-09T23:27:56Z |
| Microsoft PKI Services: CRL Publication Failures | 1842121 | RESOLVED | u654666 | [ca-compliance] [crl-failure] Next update 2023-08-18 | 2023-09-29T15:34:35Z |
| Microsoft PKI Services: DV certificate issued with OV fields | 1674561 | RESOLVED | u654666 | [ca-compliance] [dv-misissuance] | 2023-02-22T18:16:57Z |
| Microsoft PKI Services: Failure to disclose Revocation of Intermediate CAs within 7 Days | 1742195 | RESOLVED | John Mason | [ca-compliance] [disclosure-failure] | 2023-02-22T18:20:22Z |
| Microsoft PKI Services: Failure to disclose Unconstrained Intermediate within 7 Days | 1700809 | RESOLVED | John Mason | [ca-compliance] [disclosure-failure] | 2023-02-22T18:20:23Z |
| Microsoft PKI Services: Failure to modify policy documents within 365 days | 1817023 | RESOLVED | u654666 | [ca-compliance] [disclosure-failure] | 2024-05-09T23:28:04Z |
| Microsoft PKI Services: Firewall log data retention | 1658995 | RESOLVED | u654666 | [ca-compliance] [uncategorized] | 2024-05-09T23:27:58Z |
| Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence | 1652827 | RESOLVED | u654666 | [ca-compliance] [policy-failure] | 2024-06-30T18:52:20Z |
| Microsoft PKI Services: Invalid Email Address for CPRs | 1904257 | RESOLVED | u654666 | [ca-compliance] [policy-failure] [external] | 2024-06-30T20:24:53Z |
| Microsoft PKI Services: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy | 1586847 | RESOLVED | Jason Cooper | [ca-compliance] [ca-misissuance] | 2024-05-09T23:27:52Z |
| Microsoft PKI Services: Loss of Archived Firewall logs from Retention Store | 1602999 | RESOLVED | mohanr | [ca-compliance] [uncategorized] | 2024-05-09T23:27:54Z |
| Microsoft PKI Services: Malformed ICAs (Key Usage Malformed) | 1718991 | RESOLVED | John Mason | [ca-compliance] [ca-misissuance] | 2024-05-09T19:16:04Z |
| Microsoft PKI Services: Malformed ICAs (missing certificate policy extensions) | 1711147 | RESOLVED | John Mason | [ca-compliance] [ca-misissuance] | 2023-02-22T18:20:24Z |
| Microsoft PKI Services: Null Character Bug and Microsoft Root CAs | 1598390 | RESOLVED | Julio Montano | [ca-compliance] [ca-misissuance] | 2024-05-09T23:27:53Z |
| Microsoft PKI Services: OCSP Responder does not know a Certificate | 1879552 | RESOLVED | John Mason | [ca-compliance] [ocsp-failure] | 2024-03-29T15:03:07Z |
| Microsoft PKI Services: Overdue Audit Reports 2021 | 1724530 | RESOLVED | mohanr | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:46:23Z |
| Microsoft PKI Services: Policy Documentation, Failure to update Domain Validation Method | 1693932 | RESOLVED | John Mason | [ca-compliance] [policy-failure] | 2023-02-22T18:20:25Z |
| Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period | 1693930 | RESOLVED | John Mason | [ca-compliance] [policy-failure] | 2023-02-22T18:20:26Z |
| Microsoft PKI Services: Subject Key Identifiers in Some Subscriber Certificates Do Not Comply with RFC 5280 | 1944436 | RESOLVED | u654666 | [ca-compliance] [ov-misissuance] | 2025-04-03T01:35:02Z |
| Microsoft PKI Services: Trusted Role Control Failure | 1848279 | RESOLVED | u654666 | [ca-compliance] [policy-failure] Next update 2023-10-23 | 2023-10-12T10:25:15Z |
| Microsoft PKI Services: Underscore in SAN | 1705419 | RESOLVED | John Mason | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:27Z |
| Microsoft PKI Services: Unrevoked 4 intermediate certificates | 1740585 | RESOLVED | John Mason | [ca-compliance] [crl-failure] | 2024-05-09T23:28:00Z |
| Microsoft PKI Services: Vulnerability Management Exception Tracking | 1906028 | RESOLVED | u654666 | [ca-compliance] [audit-finding] | 2024-08-15T13:37:01Z |
| Multicert: AIA CA Issuer field pointing to PEM encoded cert | 1637093 | RESOLVED | ca.forum | [ca-compliance] [ov-misissuance] | 2023-02-22T18:15:13Z |
| NAVER Cloud Trust Services: Certificate issued with incorrect OCSP URI in AIA | 1908128 | RESOLVED | Hogeun Yoo | [ca-compliance] [ocsp-failure] | 2024-08-28T21:29:54Z |
| NAVER Cloud Trust Services: commonName not in SAN | 1845269 | RESOLVED | Han Yong, Park | [ca-compliance] [ov-misissuance] | 2023-09-29T15:35:46Z |
| NAVER Cloud Trust Services: DV Certificate issued with improperly validated | 1866448 | RESOLVED | Han Yong, Park | [ca-compliance] [dv-misissuance] | 2024-02-14T21:28:36Z |
| NAVER Cloud Trust Services: DV certificate issued with no subject alternative name extension | 1785865 | RESOLVED | Han Yong, Park | [ca-compliance] [dv-misissuance] | 2024-05-09T23:31:11Z |
| NAVER Cloud Trust Services: Failure to Respond to May 2022 Survey | 1772411 | RESOLVED | Han Yong, Park | [ca-compliance] [disclosure-failure] | 2024-05-09T23:31:18Z |
| NAVER Cloud Trust Services: Incorrect keyUsage for ECC certificate | 1908130 | RESOLVED | Hogeun Yoo | [ca-compliance] [ov-misissuance] | 2024-08-28T21:30:09Z |
| NAVER Cloud Trust Services: OV certificate issued with OU field | 1843268 | RESOLVED | Han Yong, Park | [ca-compliance] [ov-misissuance] | 2024-05-09T23:31:05Z |
| NetLock: CN not in SAN | 1462423 | RESOLVED | Varga Viktor | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:50Z |
| NETLOCK: CPR was not responded to in 24 hours | 1905509 | RESOLVED | Nikolett | [ca-compliance] [policy-failure] [external] | 2025-05-08T17:52:46Z |
| NETLOCK: CPS 1.5.2. problem and contact information update | 1907568 | RESOLVED | Nikolett | [ca-compliance] [policy-failure] | 2024-09-06T15:16:25Z |
| NETLOCK: CRL Error on CRL Watch of NETLOCK DVCA CRL | 1843173 | RESOLVED | Tamás Horváth | [ca-compliance] [crl-failure] | 2023-09-29T15:33:49Z |
| NetLock: Cumulative report connected to EV verification | 1676440 | RESOLVED | Varga Viktor | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:51Z |
| Netlock: Delayed reply from CPR sent to contact listed in section 1.5.2 of CP/S | 1906115 | RESOLVED | Nikolett | [ca-compliance] [policy-failure] | 2024-08-28T21:31:54Z |
| NetLock: Delayed revocation report connected to ticket 1680378 | 1688844 | RESOLVED | Varga Viktor | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:27:52Z |
| NETLOCK: Disclosed CRL is expired | 1819105 | RESOLVED | Tamás Horváth | [ca-compliance] [crl-failure] | 2023-09-29T15:33:37Z |
| Netlock: Error in latest audit report | 1718517 | RESOLVED | Ben Wilson | [ca-compliance] [audit-failure] | 2024-05-09T23:20:15Z |
| NetLock: Failure to provide regular and timely incident updates | 1572992 | RESOLVED | Varga Viktor | [ca-compliance] [policy-failure] | 2023-02-22T18:27:53Z |
| NetLock: Failure to revoke noncompliant ICA within 7 days | 1656882 | RESOLVED | Varga Viktor | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:27:48Z |
| NETLOCK: Findings in 2024 Audit | 1917046 | RESOLVED | Nikolett | [ca-compliance] [audit-finding] | 2025-04-18T15:31:56Z |
| NetLock: Intermediate CA Certificate Missing from Audit Reports | 1716874 | RESOLVED | Anna Bányai | [ca-compliance] [audit-failure] | 2024-06-30T20:09:34Z |
| NETLOCK: Invalid CT data in issued certs (SABRE.CT misconfiguration) | 1824435 | RESOLVED | Tamás Horváth | [ca-compliance] [ov-misissuance] | 2023-05-04T22:02:51Z |
| NetLock: Issuance of >398-day precertificates after 2020-09-01 | 1676367 | RESOLVED | Varga Viktor | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:54Z |
| NetLock: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy | 1586795 | RESOLVED | Varga Viktor | [ca-compliance] [ca-misissuance] | 2023-02-22T18:27:55Z |
| NetLock: Non-BR-Compliant Certificate Issuance | 1391056 | RESOLVED | Varga Viktor | [ca-compliance] [ov-misissuance] [disclosure-failure] | 2023-02-22T18:27:56Z |
| NetLock: Non-BR-Compliant Certificate Issuance -- * in not the leftmost position in dnsName | 1401211 | RESOLVED | Varga Viktor | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:57Z |
| NETLOCK: Policy Qualifiers other than id-qt-cps is included in TLS certificates | 1889570 | RESOLVED | Tamás Horváth | [ca-compliance] [ev-misissuance] | 2024-08-28T21:32:12Z |
| NETLOCK: Policy Qualifiers other than id-qt-cps is included in TLS certificates - delayed revocation | 1891331 | RESOLVED | Dorottya | [ca-compliance] [leaf-revocation-delay] | 2025-03-10T17:34:47Z |
| NETLOCK: Pre-certificates revoked with certificateHold reason | 1830823 | RESOLVED | Tamás Horváth | [ca-compliance] | 2023-08-04T16:10:19Z |
| Netlock: Problem with NETLOCK's codesigning CA | 1734114 | RESOLVED | Anna Bányai | [ca-compliance] | 2024-05-09T19:15:29Z |
| NetLock: Replacement of enduser certificates after the EVGL 1.7.4 self-audit | 1680378 | RESOLVED | Anna Bányai | [ca-compliance] [ev-misissuance] | 2023-02-22T18:13:32Z |
| NETLOCK: SSL certificates with OU field | 1820174 | RESOLVED | Tamás Horváth | [ca-compliance] [ov-misissuance] | 2023-07-28T22:14:47Z |
| NETLOCK: SSL certificates with OU field - revocation delay | 1822809 | RESOLVED | Tamás Horváth | [ca-compliance] [leaf-revocation-delay] | 2023-09-29T15:34:03Z |
| Network Solutions: Audit report delay | 1649507 | RESOLVED | Roy Dykes | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:46:45Z |
| Network Solutions: 2021 Audit Findings 1-3 | 1725047 | RESOLVED | Keith McKenney | [ca-compliance] [audit-finding] | 2023-02-22T18:20:56Z |
| Network Solutions: 2021 Audit Observation #1 | 1725039 | RESOLVED | Keith McKenney | [ca-compliance] [audit-finding] | 2023-02-22T18:20:57Z |
| Network Solutions: 2021 Audit Observation #2 | 1725041 | RESOLVED | Keith McKenney | [ca-compliance] [audit-finding] | 2023-02-22T18:20:59Z |
| Network Solutions: 2021 Audit Observation #3 | 1725043 | RESOLVED | Keith McKenney | [ca-compliance] [audit-finding] | 2023-02-22T18:21:00Z |
| Network Solutions: All test CA test website certificates are expired | 1726333 | RESOLVED | Keith McKenney | [ca-compliance] [uncategorized] | 2023-02-22T18:21:01Z |
| PKIoverheid / QuoVadis: CPS inconsistencies | 1650234 | RESOLVED | Stephen Davidson | [ca-compliance] [policy-failure] | 2023-02-22T18:26:13Z |
| PKIoverheid: (KPN) Incorrect Subject OrganizationName | 1746421 | RESOLVED | David Weissenberg | [ca-compliance] [ov-misissuance] | 2023-02-22T18:16:22Z |
| PKIoverheid: CIBG insufficient serial number entropy | 1573490 | RESOLVED | Jorik van 't Hof | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:36Z |
| PKIoverheid: Compliance issues CIBG TLS certificates | 1578809 | RESOLVED | Jochem van den Berge | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:17Z |
| PKIoverheid: Delayed audit statements for intermediate CAs | 1843265 | RESOLVED | Jochem van den Berge | [ca-compliance] [audit-delay] | 2024-03-27T16:06:27Z |
| PKIoverheid: Failure to revoke within 7 days: OCSP EKU issue | 1652604 | RESOLVED | Jorik van 't Hof | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:20:37Z |
| PKIoverheid: Failure to revoke within 7 days: OCSP EKU issue | 1652922 | RESOLVED | Ben Wilson | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:15:09Z |
| PKIoverheid: Incorrect OCSP Delegated Responder Certificate | 1649964 | RESOLVED | Jorik van 't Hof | [ca-compliance] [ocsp-failure] | 2023-02-22T18:20:38Z |
| PKIoverheid: KPN CPS lacks CPR problem reporting instructions | 1596923 | RESOLVED | Jorik van 't Hof | [ca-compliance] [policy-failure] | 2024-06-30T20:25:19Z |
| PKIoverheid: KPN CPS Lists Forbidden Domain Validation Method 3.2.2.4.6 | 1719451 | RESOLVED | David Weissenberg | [ca-compliance] [policy-failure] | 2023-02-22T18:16:23Z |
| PKIoverheid: KPN Insufficient Serial Number Entropy | 1535871 | RESOLVED | Jochem van den Berge | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:20:18Z |
| PKIoverheid: KPN issued Invalid organizationalUnitName | 1706950 | RESOLVED | Jorik van 't Hof | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:40Z |
| PKIoverheid: Missing intermediate CA certificates in WTBR audit statements Staat der Nederlanden 2017/2018 | 1605126 | RESOLVED | Jorik van 't Hof | [ca-compliance] [audit-failure] | 2024-06-30T20:11:17Z |
| PKIoverheid: Missing Intermediate CA from audit statement | 1609706 | RESOLVED | Jorik van 't Hof | [ca-compliance] [audit-failure] | 2024-06-30T20:10:26Z |
| PKIoverheid: No BR Audit for Intermediate CAs technically capable of issuing TLS certs | 1586125 | RESOLVED | Jorik van 't Hof | [ca-compliance] [audit-failure] | 2024-06-30T20:11:37Z |
| PKIoverheid: Overdue audit statements for intermediate certificates | 1669518 | RESOLVED | Jorik van 't Hof | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:47:11Z |
| PKIoverheid: TSP CPS lacks problem reporting instructions | 1610507 | RESOLVED | Jorik van 't Hof | [ca-compliance] [policy-failure] | 2023-02-22T18:20:46Z |
| Private keys for certificates exposed through their web server | 1378074 | RESOLVED | Kathleen Wilson | [ca-compliance] [uncategorized] | 2023-02-22T18:21:25Z |
| PROCERT: Non-BR-Compliant Certificate Issuance | 1391058 | RESOLVED | Procert | [ca-compliance] [uncategorized] | 2023-02-22T18:22:57Z |
| QuoVadis / Freistaat Bayern: Non-BR-compliant Key Usage | 1468477 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2024-05-09T23:37:23Z |
| QuoVadis / PKIoverheid: incorrect OCSP response for precertificate | 1724276 | RESOLVED | Stephen Davidson | [ca-compliance] [ocsp-failure] | 2023-02-22T18:26:42Z |
| QuoVadis / Siemens: Insufficient serial number entropy | 1534535 | RESOLVED | Rufus Buschart | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:04Z |
| QuoVadis: BR Error - san dns name starts with period | 1521950 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:16Z |
| QuoVadis: EV serialNumber with "none" | 1645708 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:17Z |
| QuoVadis: Failure to revoke certificates with compromised private keys | 1624504 | RESOLVED | Stephen Davidson | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:26:18Z |
| QuoVadis: Incorrect EV businessCategory | 1593357 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:19Z |
| QuoVadis: IPaddress in DNSname SAN | 1530623 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:20Z |
| QuoVadis: LLB insufficient Serial Number Entropy | 1540315 | RESOLVED | Stephen Davidson | [ca-compliance] [uncategorized] | 2023-02-22T18:26:21Z |
| QuoVadis: N/A in EV serialNumber field | 1576283 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:22Z |
| QuoVadis: OCSP handling of Certificate Transparency Pre-certs | 1579950 | RESOLVED | Stephen Davidson | [ca-compliance] | 2022-11-14T22:22:57Z |
| QuoVadis: Unconstrained CAs missing audits | 1581597 | RESOLVED | Stephen Davidson | [ca-compliance] [ca-revocation-delay] [covid-19] | 2023-02-22T18:26:24Z |
| QuoVadis: Certificate containing Debian weak key | 1472052 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:25Z |
| QuoVadis: DarkMatter Insufficient Serial Number Entropy | 1531800 | RESOLVED | Scott Rea | [ca-compliance] [ca-misissuance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:26:07Z |
| QuoVadis: EV JOI Issue | 1581234 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:26Z |
| QuoVadis: Failure to provide a preliminary report within 24 hours | 1762456 | RESOLVED | Jeremy Rowley | [ca-compliance] | 2022-11-14T22:22:57Z |
| QuoVadis: Failure to provide a preliminary report within 24 hours. | 1649880 | RESOLVED | Stephen Davidson | [ca-compliance] [disclosure-failure] | 2023-02-22T18:26:27Z |
| QuoVadis: failure to reply to CPR in a timely manner | 1590171 | RESOLVED | Stephen Davidson | [ca-compliance] [policy-failure] | 2024-06-30T20:25:51Z |
| QuoVadis: Failure to revoke within 7 days: OCSP EKU issue | 1651553 | RESOLVED | Stephen Davidson | [ca-compliance] [ca-revocation-delay] [ocsp-failure] | 2023-02-22T18:26:29Z |
| QuoVadis: Findings in 2024 ETSI Audit of QuoVadis Qualified Web ICA G2 | 1918467 | RESOLVED | Stephen Davidson | [ca-compliance] [audit-finding] | 2024-10-07T15:39:23Z |
| QuoVadis: hostnames not in preferred name syntax | 1738472 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:31Z |
| QuoVadis: improper countryName format | 1493760 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:32Z |
| QuoVadis: Incorrect EV jurisdiction of incorporation information | 1589047 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:33Z |
| QuoVadis: Incorrect keyUsage for ECC certificate | 1667518 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:34Z |
| QuoVadis: Incorrect OCSP Delegated Responder Certificate | 1649938 | RESOLVED | Stephen Davidson | [ca-compliance] [ocsp-failure] | 2023-02-22T18:26:35Z |
| Quovadis: Insufficient Serial Number Entropy | 1533899 | RESOLVED | Jeremy Rowley | [ca-compliance] | 2022-11-14T22:22:57Z |
| QuoVadis: IP in dnsName | 1524879 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:36Z |
| QuoVadis: Issuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy or the BRs | 1586792 | RESOLVED | Stephen Davidson | [ca-compliance] [ca-misissuance] | 2023-02-22T18:26:37Z |
| QuoVadis: Multiple unreported misissuances in 2018 | 1519260 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:38Z |
| QuoVadis: Non-BR-Compliant Certificate Issuance | 1391063 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] [remediation-accepted] | 2023-02-22T18:26:08Z |
| QuoVadis: Non-BR-Compliant issuance --improper characters in DNSName (BIT sub-CA) | 1430909 | RESOLVED | Stephen Davidson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:10Z |
| QuoVadis: Non-BR-Compliant OCSP Responder | 1426238 | RESOLVED | Stephen Davidson | [ca-compliance] [ocsp-failure] | 2023-02-22T18:26:11Z |
| QuoVadis: Recap of BR Compliance in 2018 issuance by external subCAs | 1519265 | VERIFIED | Wayne Thayer | [ca-compliance] | 2022-11-14T22:22:57Z |
| QuoVadis: revocation services validity set to expected value plus one second | 1733000 | RESOLVED | Stephen Davidson | [ca-compliance] [ocsp-failure] [crl-failure] | 2023-02-22T18:26:39Z |
| QuoVadis: Unconstrained CAs revocation | 1599916 | RESOLVED | Stephen Davidson | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:26:40Z |
| QuoVadis: use of Organisationidentifier field in EV (Pre CABF Ballot SC17) | 1563917 | RESOLVED | Stephen Davidson | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:41Z |
| SECOM: "Default City" in Subject:localityName | 1548714 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:09Z |
| SECOM: Ambiguity on KeyUsage with ECC public key | 1560234 | RESOLVED | Hisashi Kamo | [ca-compliance] | 2022-11-14T22:22:57Z |
| SECOM: certificate for .test TLD | 1524452 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:12Z |
| SECOM: certificate for which “L” and “ST” not set | 1544722 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:13Z |
| SECOM: certificate for which “OU=-” | 1544712 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:14Z |
| SECOM: Certificates Issued with lower case value in subject:countryName | 1896596 | RESOLVED | ONO Fumiaki | [ca-compliance] [ov-misissuance] | 2024-07-24T19:20:50Z |
| SECOM: CP/CPS does not clearly specify domain validation methods | 1705480 | RESOLVED | Hisashi Kamo | [ca-compliance] [policy-failure] | 2023-02-22T18:18:15Z |
| SECOM: CrossTrust: OU > 64 characters | 1532105 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:16Z |
| SECOM: Delayed Revocation of CA Certificate with OCSP EKU Issue | 1652610 | RESOLVED | Hisashi Kamo | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:18:08Z |
| SECOM: Delayed Revocation of non-technically constrained FUJIFILM Certificates | 1707229 | RESOLVED | Hisashi Kamo | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:18:17Z |
| SECOM: Difference in upper and lower case between CN field and SAN | 1897346 | RESOLVED | ONO Fumiaki | [ca-compliance] [dv-misissuance] | 2024-07-24T19:21:05Z |
| SECOM: Failed an annual CPS update of Cybertrust Japan (CTJ) | 1769222 | RESOLVED | Hisashi Kamo | [ca-compliance] [policy-failure] | 2024-06-30T20:37:36Z |
| SECOM: Failure to disclose Unconstrained Intermediate within 7 Days | 1563574 | RESOLVED | Hisashi Kamo | [ca-compliance] [disclosure-failure] | 2023-02-22T18:18:19Z |
| SECOM: failure to revoke underscores | 1524816 | RESOLVED | Hisashi Kamo | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:18:21Z |
| SECOM: FUJIFILM intermediate CA Certificate not listed in audit statement | 1695938 | RESOLVED | Hisashi Kamo | [ca-compliance] [audit-failure] | 2024-06-30T20:12:14Z |
| SECOM: Incorrect OCSP Delegated Responder Certificate | 1649962 | RESOLVED | Hisashi Kamo | [ca-compliance] [ca-misissuance] | 2023-02-22T18:18:23Z |
| SECOM: Insufficient Serial Number Entropy | 1539358 | RESOLVED | Hisashi Kamo | [ca-compliance] [uncategorized] | 2023-02-22T18:18:24Z |
| SECOM: Intermediate CA Certificates Missing from Audit Reports | 1717044 | RESOLVED | Hisashi Kamo | [ca-compliance] [audit-failure] | 2024-06-30T20:11:56Z |
| SECOM: Issuance of TLS server certificates using keys previously compromised | 1931515 | RESOLVED | ONO Fumiaki | [ca-compliance] [ov-misissuance] Next update 2025-01-02 | 2025-01-06T16:04:20Z |
| SECOM: Mis-issued EV Certificates | 1576133 | RESOLVED | Yuu Hidaka | [ca-compliance] [ev-misissuance] | 2023-02-22T18:28:52Z |
| SECOM: Non-BR-Compliant Certificate Issuance | 1391064 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:25Z |
| SECOM: Non-BR-Compliant OCSP Responders | 1398259 | RESOLVED | Hisashi Kamo | [ca-compliance] [ocsp-failure] | 2023-02-22T18:18:26Z |
| SECOM: One of the EV certificate was mis-issued with the incorrect Registration Number by Cybertrust Japan (CTJ) | 1805866 | RESOLVED | ONO Fumiaki | [ca-compliance] [ev-misissuance] | 2023-02-02T01:51:38Z |
| SECOM: Outdated audit statements for intermediate certificates | 1695993 | RESOLVED | Hisashi Kamo | [ca-compliance] [audit-failure] | 2024-06-30T20:12:30Z |
| SECOM: Root CRLs exceed maximum validity period by 1 second | 1735998 | RESOLVED | Hisashi Kamo | [ca-compliance] [crl-failure] [policy-failure] | 2023-02-22T18:18:28Z |
| SECOM: TSA Certs Issued from Root | 1452671 | RESOLVED | Hisashi Kamo | [ca-compliance] [uncategorized] | 2023-02-22T18:18:29Z |
| SECOM: Undisclosed intermediate certificates | 1497703 | RESOLVED | Hisashi Kamo | [ca-compliance] [disclosure-failure] | 2023-02-22T18:18:30Z |
| SECOM: Unqualified domain name in SAN | 1695786 | RESOLVED | Hisashi Kamo | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:31Z |
| Sectigo / SSL.com: Late disclosure of updated SSL.com CP/CPS to CCADB | 1942651 | RESOLVED | Rob Stradling | [ca-compliance] [disclosure-failure] | 2025-02-14T17:04:56Z |
| Sectigo / Web.com: inconsistent disclosure of externally-operated intermediate | 1567060 | RESOLVED | Robin Alden | [ca-compliance] [disclosure-failure] | 2023-02-22T18:25:08Z |
| Sectigo: Missing Intermediate CA Certificate in Audit - D-TRUST CA 2-1 2015 | 1597948 | RESOLVED | Robin Alden | [ca-compliance] [audit-failure] | 2024-06-30T20:13:47Z |
| Sectigo: "Default City" in Subject:localityName | 1548713 | RESOLVED | Robin Alden | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:25:09Z |
| Sectigo: "Manual DCV" method used | 1718579 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:10Z |
| Sectigo: "Some-State" in stateOrProvinceName | 1551362 | RESOLVED | Robin Alden | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:25:10Z |
| Sectigo: "unauthorized" OCSP responses | 1639518 | VERIFIED | Robin Alden | [ca-compliance] | 2022-11-14T22:22:57Z |
| Sectigo: 2020 failure to respond to CPRs discovered | 1718785 | RESOLVED | Tim Callan | [ca-compliance] [disclosure-failure] [policy-failure] | 2024-06-30T20:26:27Z |
| Sectigo: CCADB failed ALV - Ensured Root CA | 1597950 | RESOLVED | Robin Alden | [ca-compliance] [audit-failure] | 2023-02-22T18:25:13Z |
| Sectigo: CCADB failed ALV - Network Solutions Certificate Authority | 1597947 | RESOLVED | Rob Stradling | [ca-compliance] [audit-failure] | 2023-02-22T18:24:58Z |
| Sectigo: Certificate issuance delayed for more than 398 days after DCV was completed | 1829746 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2023-06-02T15:24:51Z |
| Sectigo: Certificates with RSA keys where modulus is not divisible by 8 | 1653504 | RESOLVED | Nick France | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:23:18Z |
| Sectigo: CPR response issues | 1650845 | RESOLVED | Nick France | [ca-compliance] [ev-misissuance] [policy-failure] | 2024-06-30T20:26:48Z |
| Sectigo: CRL validity beyond CPS allowed value | 1735761 | RESOLVED | Tim Callan | [ca-compliance] [crl-failure] | 2023-02-22T18:27:12Z |
| Sectigo: DCV Reuse after 825 days | 1718771 | RESOLVED | Rob Stradling | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:24:59Z |
| Sectigo: EV Certificate issuance with incorrect subject:serialNumber attribute value | 1891245 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2024-05-13T21:29:39Z |
| Sectigo: EV SSL Certificates with incorrect businessCategory | 1590810 | RESOLVED | Robin Alden | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:14Z |
| Sectigo: EV SSL Certificates with incorrect subject details. | 1575022 | RESOLVED | Robin Alden | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:15Z |
| Sectigo: Failure to block disallowed LDH labels in domain names | 1740493 | RESOLVED | Martijn Katerbarg | [ca-compliance] [dv-misissuance] | 2023-02-22T18:22:04Z |
| Sectigo: Failure to invalidate Email DCV Random Values after 30 days | 1878139 | RESOLVED | Martijn Katerbarg | [ca-compliance] [dv-misissuance] | 2024-05-20T04:11:27Z |
| Sectigo: Failure to properly respond to a report of subscriber key compromise | 1635840 | RESOLVED | Robin Alden | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:25:16Z |
| Sectigo: Failure to provide a preliminary report within 24 hours | 1619359 | RESOLVED | Robin Alden | [ca-compliance] [disclosure-failure] | 2023-02-22T18:25:17Z |
| Sectigo: Failure to provide a preliminary report within 24 hours. | 1648717 | RESOLVED | Rich Smith | [ca-compliance] [disclosure-failure] | 2023-02-22T18:24:47Z |
| Sectigo: Failure to provide timely incident reports | 1563579 | RESOLVED | Rob Stradling | [ca-compliance] [disclosure-failure] | 2023-02-22T18:25:01Z |
| Sectigo: Failure to revoke certificate with previously-compromised key within 24 hours | 1625715 | RESOLVED | Robin Alden | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:25:18Z |
| Sectigo: Failure to revoke ECC certificates with non-DER encoded keyUsage within 5 days | 1800756 | RESOLVED | Martijn Katerbarg | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:22:05Z |
| Sectigo: Failure to revoke key-compromised certificate within 24 hours | 1639804 | RESOLVED | Robin Alden | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:25:19Z |
| Sectigo: Failure to revoke key-compromised certificates | 1639805 | RESOLVED | Rich Smith | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:24:48Z |
| Sectigo: Failure to revoke within 24 hours | 1492006 | RESOLVED | Robin Alden | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:25:20Z |
| Sectigo: Failure to revoke within 5 days | 1665763 | RESOLVED | Rich Smith | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:24:49Z |
| Sectigo: Forbidden Domain Validation Method | 1714628 | RESOLVED | Tim Callan | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:13Z |
| Sectigo: HTML encoded characters in subject attribute values | 1912225 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ov-misissuance] | 2024-09-26T18:18:59Z |
| Sectigo: Inadequate DCV | 1694233 | RESOLVED | Tim Callan | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:14Z |
| Sectigo: Inadequate vulnerability scanning and patching | 1869056 | RESOLVED | Martijn Katerbarg | [ca-compliance] [policy-failure] | 2024-02-02T15:02:27Z |
| Sectigo: Inappropriate subject:serialNumber information in EV certificates obtained through ACME | 1712120 | RESOLVED | Tim Callan | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:15Z |
| Sectigo: Incomplete Subject organizationName | 1813989 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ov-misissuance] Next update 2023-04-17 | 2023-05-04T21:28:52Z |
| Sectigo: Incomplete Subscriber Agreement provisions | 1823723 | RESOLVED | Martijn Katerbarg | [ca-compliance] [policy-failure] | 2023-04-05T16:52:17Z |
| Sectigo: Incorrect EV businessCategory | 1715929 | RESOLVED | Tim Callan | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:17Z |
| Sectigo: Incorrect inclusion of DBA name | 1895722 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ov-misissuance] | 2024-06-05T21:36:42Z |
| Sectigo: Incorrect JOI | 1793789 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:06Z |
| Sectigo: Incorrect JOI Country value | 1747915 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:07Z |
| Sectigo: Incorrect JOI for federal credit unions | 1741026 | RESOLVED | Tim Callan | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:18Z |
| Sectigo: Incorrect locality information | 1714193 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:19Z |
| Sectigo: Incorrect OCSP responses | 1763203 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:08Z |
| Sectigo: Incorrectly included registrationStateOrProvince in PSD-based cabfOrganizationIdentifier extension | 1897538 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2024-06-14T17:08:26Z |
| Sectigo: Intermittent OCSP unauthorized responses for certificates older than 15 minutes | 1946927 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ocsp-failure] [external] | 2025-05-16T22:58:55Z |
| Sectigo: invalid dnsName | 1524730 | RESOLVED | Robin Alden | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:21Z |
| Sectigo: Invalid postalCode field | 1708934 | RESOLVED | Tim Callan | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:20Z |
| Sectigo: Invalid stateOrProvinceName | 1710243 | RESOLVED | Rob Stradling | [ca-compliance] [ov-misissuance] | 2023-02-22T18:25:02Z |
| Sectigo: invalid subject:organizationalUnitName on DV certificates | 1593776 | RESOLVED | Robin Alden | [ca-compliance] [dv-misissuance] | 2023-02-22T18:25:22Z |
| Sectigo: Issuance of ECC leaf certificates with non-DER encoded keyUsage | 1796803 | RESOLVED | Rob Stradling | [ca-compliance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:25:03Z |
| Sectigo: Lack of input validation in stateOrProvinceName | 1645686 | RESOLVED | Rich Smith | [ca-compliance] [ev-misissuance] | 2023-02-22T18:24:50Z |
| Sectigo: Late CCADB update after CPS update | 1812336 | RESOLVED | Martijn Katerbarg | [ca-compliance] [disclosure-failure] | 2023-02-10T16:58:18Z |
| Sectigo: Late receipt and disclosure to CCADB of ETSI audit letters | 1945197 | RESOLVED | Martijn Katerbarg | [ca-compliance] [audit-delay] | 2025-02-28T15:37:21Z |
| Sectigo: Late revocation for incomplete Subject organizationName | 1818073 | RESOLVED | Martijn Katerbarg | [ca-compliance] [leaf-revocation-delay] Next update 2023-06-26 | 2023-06-28T16:51:41Z |
| Sectigo: Late termination of privileged access to Certificate Systems | 1830088 | RESOLVED | Martijn Katerbarg | [ca-compliance] [policy-failure] | 2024-03-27T16:06:53Z |
| Sectigo: Missing Changelog in CPS | 1545208 | RESOLVED | Robin Alden | [ca-compliance] [policy-failure] | 2023-02-22T18:25:23Z |
| Sectigo: Missing character in subject:organizationName attribute value | 1910451 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ov-misissuance] | 2024-08-21T14:40:40Z |
| Sectigo: Missing data in cabfOrganizationIdentifier | 1915883 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2024-09-26T18:20:01Z |
| Sectigo: Missing registration numbers in EV certificates | 1721271 | RESOLVED | Tim Callan | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:21Z |
| Sectigo: Misspelled city name in localityName field | 1782356 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:22Z |
| Sectigo: Misspellings in stateOrProvince or localityName fields | 1715024 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:23Z |
| Sectigo: Mojibake in certificate Subject fields | 1724458 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:24Z |
| Sectigo: Non-existent hostname in CDP and AIA URLs | 1793787 | RESOLVED | Martijn Katerbarg | [ca-compliance] [dv-misissuance] | 2023-02-22T18:22:09Z |
| Sectigo: Non-revocation of certificates with subject:organizationalUnitName in DV certificates | 1620561 | RESOLVED | Nick France | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:23:20Z |
| Sectigo: OCSP responses directly signed using root certificates without KU=digitalSignature | 1741777 | RESOLVED | Rob Stradling | [ca-compliance] [ocsp-failure] | 2023-02-22T18:25:04Z |
| Sectigo: Potential audit report delay | 1648593 | RESOLVED | Nick France | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:47:44Z |
| Sectigo: potentially invalid organizational validation certificates | 1717046 | RESOLVED | Ben Wilson | [ca-compliance] | 2022-11-14T22:22:57Z |
| Sectigo: Premature disabling of CRL generation for an inactive CA | 1891039 | RESOLVED | Martijn Katerbarg | [ca-compliance] [crl-failure] | 2024-05-05T19:21:42Z |
| Sectigo: QWAC certificates issued with incorrect subject:organizationIdentifier attribute value | 1902748 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ev-misissuance] | 2024-08-28T21:30:28Z |
| Sectigo: Reseller ZeroSSL and Private Key Generation | 1699756 | RESOLVED | Ben Wilson | [ca-compliance] | 2022-11-14T22:22:57Z |
| Sectigo: S/MIME certificates with (null) string value in subject attributes | 1853987 | RESOLVED | Martijn Katerbarg | [ca-compliance] [smime-misissuance] | 2023-10-12T10:22:14Z |
| Sectigo: S/MIME OV Mis-issuance | 1917405 | RESOLVED | Martijn Katerbarg | [ca-compliance] [smime-misissuance] [external] | 2024-10-11T17:31:37Z |
| Sectigo: SC45 DCV Reuse Error | 1756847 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:10Z |
| Sectigo: SMIME issuance with insufficient validation of mailbox authorization or control | 1860299 | RESOLVED | Martijn Katerbarg | [ca-compliance] [smime-misissuance] Next update 2023-11-30 | 2023-12-02T18:40:52Z |
| Sectigo: State name in localityName | 1720744 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:25Z |
| Sectigo: Subject field with unvalidated information included in certificates | 1736064 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:26Z |
| Sectigo: Temporary failure to publish OCSP responses for newly issued certificates | 1954580 | RESOLVED | Martijn Katerbarg | [ca-compliance] [ocsp-failure] | 2025-05-16T22:59:56Z |
| Sectigo: Temporary unavailability for subset of CRLs | 1908690 | RESOLVED | Martijn Katerbarg | [ca-compliance] [crl-failure] | 2024-08-23T15:34:34Z |
| Sectigo: test certificates issued from trusted CA | 1712188 | RESOLVED | Tim Callan | [ca-compliance] [ov-misissuance] | 2023-02-22T18:27:27Z |
| Sectigo: Truncated registration numbers in EV certificates | 1732484 | RESOLVED | Tim Callan | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:29Z |
| Sectigo: Trusted Role Access provided prior to completion of onboarding process | 1902310 | RESOLVED | Martijn Katerbarg | [ca-compliance] [policy-failure] | 2024-07-11T15:01:31Z |
| Sectigo: Use of forbidden subjectPublicKeyInfo algorithm | 1518553 | RESOLVED | Robin Alden | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:25:24Z |
| Sectigo: Wrong usage of LEI records for the issuance of SMIME Certificates | 1876775 | RESOLVED | Martijn Katerbarg | [ca-compliance] [smime-misissuance] | 2024-03-04T16:59:22Z |
| Sectigo: ZeroSSL: failure to revoke within 24 hours | 1698936 | RESOLVED | Tim Callan | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:27:30Z |
| SecureTrust: "Some-State" in stateOrProvinceName | 1551374 | RESOLVED | fcorday | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:38Z |
| SecureTrust: 2 certificates with non-DER encoded keyUsage extension | 1776764 | RESOLVED | u671069 | [ca-compliance] [ca-misissuance] Next update 3-1-2023 | 2023-04-13T19:30:06Z |
| SecureTrust: BR Audit 2019 - matters to be resolved | 1606031 | RESOLVED | Corey Bonnell | [ca-compliance] audit-finding] | 2023-02-22T18:15:30Z |
| SecureTrust: CPS section 6.1.1.1 number 3 non-compliance event | 1671037 | RESOLVED | u671069 | [ca-compliance] [policy-failure] | 2023-02-22T18:12:39Z |
| SecureTrust: Delayed revocation of a customer revoke request | 1724485 | RESOLVED | u671069 | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:12:40Z |
| SecureTrust: Failure to provide a preliminary report within 24 hours. | 1667799 | RESOLVED | u671069 | [ca-compliance] [disclosure-failure] | 2023-02-22T18:12:41Z |
| SecureTrust: Inaccurate value in stateOrProvinceName | 1667842 | RESOLVED | u671069 | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:42Z |
| SecureTrust: Incorrect OCSP response | 1765800 | RESOLVED | u671069 | [ca-compliance] [ocsp-failure] | 2023-02-22T18:12:43Z |
| SecureTrust: Invalid localityName | 1720723 | RESOLVED | u671069 | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:44Z |
| SecureTrust: Metadata-only field values in 2 certificates | 1646711 | RESOLVED | Corey Bonnell | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2023-02-22T18:15:31Z |
| SecureTrust: Unconstrained Intermediate CA Certificate not included in WTBR audit report | 1600844 | RESOLVED | Corey Bonnell | [ca-compliance] [audit-failure] | 2024-06-30T20:16:09Z |
| SecureTrust: Unvalidated domain in certificate | 1546776 | RESOLVED | fcorday | [ca-compliance] [ov-misissuance] | 2023-02-22T18:17:37Z |
| Sertifitseerimiskeskuse: Non-BR-Compliant OCSP Responders | 1398233 | RESOLVED | Mihkel Tammsalu | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:52Z |
| SHECA: CRLReason code usage error | 1914365 | RESOLVED | SHECA | [ca-compliance] [crl-failure] | 2025-03-05T18:52:00Z |
| SHECA: CRLs unavailable, not downloading | 1855997 | RESOLVED | jasmine.tang | [ca-compliance] [crl-failure] [external] Next update 2023-11-02 | 2024-06-30T18:43:35Z |
| SHECA: Delayed revocation of intermediate CA certificates | 1814288 | RESOLVED | chenxiaotong | [ca-compliance] [ca-revocation-delay] | 2023-04-07T15:31:30Z |
| SHECA: DV SSL certificate format is abnormal | 1946921 | RESOLVED | SHECA | [ca-compliance] [dv-misissuance] | 2025-04-09T18:43:30Z |
| SHECA: EV certificate subject RDN order is incorrect | 1902592 | RESOLVED | jasmine.tang | [ca-compliance] [ev-misissuance] | 2024-08-21T14:39:52Z |
| SHECA: Failure to Respond to April 2023 Survey | 1838866 | RESOLVED | chenxiaotong | [ca-compliance] [disclosure-failure] | 2023-09-29T15:32:20Z |
| SHECA: Failure to revoke within 5 days | 1856503 | RESOLVED | chenxiaotong | [ca-compliance] [leaf-revocation-delay] | 2023-10-19T15:38:33Z |
| SHECA: Failure to Submit Annual CCADB Self Assessment | 1844799 | RESOLVED | jasmine.tang | [ca-compliance] [disclosure-failure] | 2023-10-12T10:23:09Z |
| SHECA: Issuance of test certificates | 1859694 | RESOLVED | chenxiaotong | [ca-compliance] [dv-misissuance] [ov-misissuance] [ev-misissuance] | 2023-11-29T22:25:52Z |
| SHECA: Non-compliant Subject Fields problem in OV TLS certificate | 1839105 | RESOLVED | chenxiaotong | [ca-compliance] [ov-misissuance] | 2023-11-29T22:28:00Z |
| SHECA: organizationName problems in OV and EV TLS certificates | 1815527 | RESOLVED | chenxiaotong | [ca-compliance] [ov-misissuance][ev-misissuance] | 2023-11-29T22:28:15Z |
| SHECA: Outdated Organizational Units (OUs) problems in OV TLS certificates | 1838765 | RESOLVED | chenxiaotong | [ca-compliance] [ov-misissuance] | 2023-11-29T22:27:38Z |
| SHECA: The certificate's cpsURI is empty | 1902947 | RESOLVED | SHECA | [ca-compliance] [ev-misissuance] | 2024-08-21T14:39:33Z |
| SHECA: UniTrust: EV certificate with wrong Registry Country Name | 1798626 | RESOLVED | chenxiaotong | [ca-compliance] [ev-misissuance] | 2023-11-29T22:28:29Z |
| SHECA: UniTrust: Improper DER results in failure to comply with RFC 5280 - Encoded sequence component with default value | 1735908 | RESOLVED | chenxiaotong | [ca-compliance] [ca-misissuance] | 2023-11-29T22:28:42Z |
| Siemens: meaningless characters in personal name fields | 1902042 | RESOLVED | Thorsten Bergmann | [ca-compliance] [smime-misissuance] Next update 2024-09-06 | 2024-08-23T15:35:25Z |
| SK ID Solutions: ALV failures on intermediate certificates | 1614449 | RESOLVED | Kristel Rünnimeri | [ca-compliance] [audit-failure] | 2024-06-30T19:48:02Z |
| SK ID Solutions: Incorrect OCSP Delegated Responder Certificate | 1649942 | RESOLVED | Kathleen Wilson | [ca-compliance] [ocsp-failure] | 2023-02-22T18:21:26Z |
| SSL.com: CAA Empty set handling results in Wildcard issuance | 1932973 | RESOLVED | SSL.com | [ca-compliance] [ov-misissuance] [external] | 2025-04-07T14:51:22Z |
| SSL.com: CRL not found - SSL.com-Enterprise-Intermediate-EV-RSA-4096-R1.crl | 1548720 | RESOLVED | SSL.com | [ca-compliance] [crl-failure] | 2023-02-22T18:26:50Z |
| SSL.com: Delay in publishing OCSP responses | 1931636 | RESOLVED | Rebecca Kelley | [ca-compliance] [ocsp-failure] | 2025-02-12T17:07:13Z |
| SSL.com: Delayed revocation of 53 certificates affected by bug #1750631 | 1752636 | RESOLVED | SSL.com | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:26:52Z |
| SSL.com: Delayed revocation of certificate with weak key | 1800753 | RESOLVED | SSL.com | [ca-compliance] [leaf-revocation-delay] | 2023-07-21T16:04:41Z |
| SSL.com: Entrust API and CAA checking | 1931615 | RESOLVED | Rebecca Kelley | [ca-compliance] [ov-misissuance] [external] | 2024-12-03T15:53:22Z |
| SSL.com: Expired CRLs | 1550576 | RESOLVED | Chris Kemmerer | [ca-compliance] Expired CRLs | 2022-11-14T22:22:57Z |
| SSL.com: Failure to process CAA records from one SubCA | 1938236 | RESOLVED | Rebecca Kelley | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2025-02-28T15:37:52Z |
| SSL.com: Findings in 2023 audit | 1867851 | RESOLVED | SSL.com | [ca-compliance] [audit-finding] | 2024-04-24T07:20:43Z |
| SSL.com: Incorrect Domain Validation for 1 TLS certificate with FQDN having "www." string within domain labels | 1724520 | RESOLVED | SSL.com | [ca-compliance] [dv-misissuance] | 2023-02-22T18:26:52Z |
| SSL.com: Insufficient serial number entropy | 1534147 | RESOLVED | Fotis Loukos | [ca-compliance] [ca-misissuance] [ev-misissuance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:22:30Z |
| SSL.com: Insufficient validation evidence for the localityName attribute of an OV certificate | 1666872 | RESOLVED | SSL.com | [ca-compliance] [ov-misissuance] | 2023-02-22T18:26:53Z |
| SSL.com: Intermediate certificate not listed in audit reports | 1610000 | RESOLVED | SSL.com | [ca-compliance] [audit-failure] | 2023-02-22T18:26:55Z |
| SSL.com: Issuance of 1 EV TLS certificate using a Registration/Incorporation Agency not included in our approved public list. | 1790693 | RESOLVED | SSL.com | [ca-compliance] [ev-misissuance] | 2023-03-24T16:11:39Z |
| SSL.com: Issuance of 3 EV TLS certificates without 2-person validation of the organization information | 1722089 | RESOLVED | SSL.com | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:56Z |
| SSL.com: Issuance of an EV TLS certificate with incorrect O Field Value | 1719916 | RESOLVED | SSL.com | [ca-compliance] [ev-misissuance] | 2023-02-22T18:26:57Z |
| SSL.com: Issuance of one Sponsored-Validated S/MIME certificate with organization information in givenName and surName of the subjectDN | 1871113 | RESOLVED | SSL.com | [ca-compliance] [smime-misissuance] | 2024-05-15T14:13:55Z |
| SSL.com: Issuance of TLS certificates with domain validation methods prohibited by SC-45 | 1750631 | RESOLVED | SSL.com | [ca-compliance] [dv-misissuance] | 2024-06-30T03:32:01Z |
| SSL.com: Issued precertificate with Debian Weak Key | 1620772 | RESOLVED | SSL.com | [ca-compliance] [dv-misissuance] | 2023-02-22T18:26:59Z |
| SSL.com: P-384 curve / ecdsa-with-SHA256 certificates | 1534145 | RESOLVED | Fotis Loukos | [ca-compliance] [ca-misissuance] [ev-misissuance] [ov-misissuance] [dv-misissuance] [ocsp-failure] | 2023-02-22T18:22:31Z |
| SSL.com: Precertificates without corresponding certificates return OCSP value of "Unknown" | 1579509 | RESOLVED | SSL.com | [ca-compliance] | 2022-11-14T22:22:57Z |
| SSL.com: Revocation process requires submission to a form that is unusable | 1942270 | RESOLVED | Rebecca Kelley | [ca-compliance] [policy-failure] | 2025-04-07T14:51:39Z |
| SSL.com: S/MIME certificates issued prior to validation | 1850171 | RESOLVED | SSL.com | [ca-compliance] [smime-misissuance] | 2023-09-29T15:36:14Z |
| SSL.com: subCA/Reseller Issues | 1832570 | RESOLVED | SSL.com | [ca-compliance] [policy-failure] | 2024-06-14T17:07:39Z |
| SSL.com: Wildcard DV certificate issued with a non-validated domain name | 1678720 | RESOLVED | SSL.com | [ca-compliance] [dv-misissuance] | 2023-02-22T18:27:00Z |
| Staat der Nederlandend / PKIoverheid: Non-BR-Compliant Certificate Issuance | 1391864 | RESOLVED | Mark Janssen | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:02Z |
| Staat der Nederlandend / PKIoverheid: Non-BR-Compliant OCSP Responders | 1398251 | RESOLVED | Mark Janssen | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:03Z |
| StartCom: 'un-revoking' intermediate certificates | 1369342 | RESOLVED | Kathleen Wilson | [ca-compliance] [uncategorized] | 2023-02-22T18:21:28Z |
| StartCom: CAA Mis-Issuance on CNAME pointing directly to restrictive CAA record | 1409760 | RESOLVED | Iñigo | [ca-compliance] | 2022-11-14T22:22:57Z |
| Startcom: CAA Mis-Issuance: Lookup failure on DNSSEC-signed zone | 1409859 | RESOLVED | Iñigo | [ca-compliance] | 2024-05-09T23:38:31Z |
| StartCom: mis-issuance of certs with unvalidated domain names and bogus field values | 1369359 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:29Z |
| StartCom: Non-BR-Compliant Certificate Issuance -- adding Certnomis intermediates to OneCRL | 1386894 | RESOLVED | Kathleen Wilson | [ca-compliance] [ev-misissuance] [dv-misissuance] | 2023-02-22T18:21:30Z |
| Swisscom: certificates without DNS names in subjectAltName | 1195115 | RESOLVED | H-P Waldegger | [ca-compliance] | 2022-11-14T22:22:57Z |
| Swisscom: Missing Audits for Unconstrained Intermediate Certificates | 1464286 | RESOLVED | H-P Waldegger | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:33Z |
| SwissSign: 'c/o' in streetAddress of EV certificate | 1798316 | RESOLVED | Mike Guenther | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:32Z |
| SwissSign: "Some-State" in stateOrProvinceName | 1551364 | RESOLVED | Timo Schmitt | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:32Z |
| SwissSign: Audit Letter Validation failures on intermediate certificates | 1614450 | RESOLVED | Nathalie Weiler | [ca-compliance] | 2022-11-14T22:22:57Z |
| SwissSign: BRs require full annual audits | 1374381 | RESOLVED | Reinhard Dietrich | [ca-compliance] [audit-failure] | 2023-02-22T18:24:44Z |
| SwissSign: Cert issued with a to long validity period | 1443731 | RESOLVED | Juerg.Eiholzer | [ca-compliance] [ov-misissuance] | 2023-02-22T18:20:51Z |
| SwissSign: Cert issued with a to long validity period | 1443733 | RESOLVED | Wayne Thayer | [ca-compliance] [ev-misissuance] | 2023-02-22T18:28:34Z |
| SwissSign: Certificate issue with Signature | 1459557 | RESOLVED | Juerg.Eiholzer | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:20:52Z |
| SwissSign: Certificate with key length 16258 | 1731586 | RESOLVED | Mike Guenther | [ca-compliance] [uncategorized] | 2023-02-22T18:22:33Z |
| SwissSign: Certificate with key length 4098 bit | 1691704 | RESOLVED | Mike Guenther | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:34Z |
| SwissSign: CP/CPS certificate profile issue | 1558552 | RESOLVED | Mike Guenther | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:22:35Z |
| SwissSign: CRL/OCSP revocation time mismatch | 1815466 | RESOLVED | Roman Fischer | [ca-compliance] [crl-failure] [ocsp-failure] Next update 2023-04-30 | 2023-04-19T22:25:32Z |
| SwissSign: Delayed revocation for mispellings in Location for a number of Certificates | 1613406 | RESOLVED | Mike Guenther | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:22:36Z |
| SwissSign: difference in upper and lower case between CN field and SAN | 1874196 | RESOLVED | Sandy Balzer | [ca-compliance] [dv-misissuance] [ov-misissuance] | 2024-03-27T16:05:58Z |
| SwissSign: Domain validated certificate but with stateOrProvinceName | 1473971 | RESOLVED | Reinhard Dietrich | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:46Z |
| SwissSign: duplicate serial number | 1636140 | RESOLVED | Mike Guenther | [ca-compliance] [dv-misissuance] | 2023-02-22T18:22:37Z |
| SwissSign: duplicate serial number | 1677737 | RESOLVED | Mike Guenther | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:39Z |
| SwissSign: Error in OrganisationIdentifier in signature/seal certificate | 1541064 | RESOLVED | Mike Guenther | [ca-compliance] [uncategorized] | 2023-02-22T18:22:40Z |
| SwissSign: EV code in JurisdiktionStateOrProvinceName | 1860750 | RESOLVED | raffaela.achermann | [ca-compliance] [ev-misissuance] | 2023-11-08T16:29:05Z |
| SwissSign: EV delayed revocation | 1861682 | RESOLVED | Roman Fischer | [ca-compliance] [leaf-revocation-delay] | 2023-12-02T18:41:24Z |
| SwissSign: EV JurisdictionStateOrProvinceName - one certificate not selected for revocation | 1866091 | RESOLVED | Roman Fischer | [ca-compliance] [ev-misissuance] | 2023-12-11T16:50:53Z |
| SwissSign: failure to provide a preliminary report within 24 hours | 1636141 | RESOLVED | Mike Guenther | [ca-compliance] [disclosure-failure] | 2023-02-22T18:22:41Z |
| SwissSign: Failure to provide a preliminary report within 24 hours. | 1671113 | RESOLVED | Mike Guenther | [ca-compliance] [disclosure-failure] | 2023-02-22T18:22:42Z |
| SwissSign: Findings in 2024 Audit | 1921424 | RESOLVED | Sandy Balzer | [ca-compliance] [audit-finding] | 2024-11-04T14:58:59Z |
| SwissSign: Invalid CT data in issued certs (SABRE.CT misconfiguration) | 1825232 | RESOLVED | Ben Wilson | [ca-compliance] | 2023-03-31T16:47:58Z |
| SwissSign: Invalid DNSName in SAN | 1428877 | RESOLVED | Mike Guenther | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:22:43Z |
| SwissSign: Invalid stateOrProvinceName field | 1670894 | RESOLVED | Mike Guenther | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:44Z |
| SwissSign: LDAP URL still in CRL distribution point (CDP) | 1916489 | RESOLVED | Sandy Balzer | [ca-compliance] [ov-misissuance] | 2025-03-18T00:57:56Z |
| SwissSign: Mis-Issuance of S/MIME certificates | 1766255 | RESOLVED | Mike Guenther | [ca-compliance] [uncategorized] | 2023-02-22T18:22:45Z |
| SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier | 1506607 | RESOLVED | Mike Guenther | [ca-compliance] [ca-misissuance] | 2023-02-22T18:22:46Z |
| SwissSign: Misissuance of Leaf Certificates because of incorrect postcode | 1569651 | RESOLVED | Timo Schmitt | [ca-compliance] [ev-misissuance] | 2023-02-22T18:27:33Z |
| SwissSign: Misissuance with mispellings in Location for a number of Certificates | 1613334 | RESOLVED | Mike Guenther | [ca-compliance] [ov-misissuance] | 2023-02-22T18:22:47Z |
| SwissSign: Missed deadline of publication of 6 CPs and 1 CP/CPS | 1784881 | RESOLVED | Mike Guenther | [ca-compliance] [disclosure-failure] | 2023-02-22T18:22:49Z |
| SwissSign: Missed revocation and opening Bugzilla | 1849364 | RESOLVED | Mike Guenther | [ca-compliance] [leaf-revocation-delay] | 2023-09-22T22:44:45Z |
| SwissSign: modified fields were not saved into certificates and resulted in miss-issuance | 1876771 | RESOLVED | Sandy Balzer | [ca-compliance] [ov-misissuance] | 2024-02-08T16:08:57Z |
| SwissSign: MPKI step-up process sets wrong JoI Locality | 1894054 | RESOLVED | Sandy Balzer | [ca-compliance] [ev-misissuance] | 2024-07-03T13:28:01Z |
| SwissSign: Non-BR-Compliant Certificate Issuance | 1391066 | RESOLVED | Corneia Enke | [ca-compliance] [uncategorized] | 2023-02-22T18:16:04Z |
| SwissSign: OCSP responder unreachable | 1662137 | RESOLVED | Mike Guenther | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:50Z |
| SwissSign: S/MIME LCP not-permitted key usage | 1914023 | RESOLVED | Sandy Balzer | [ca-compliance] [smime-misissuance] | 2025-04-03T01:35:46Z |
| SwissSign: S/MIME LCP: CN with values other than email address | 1848854 | RESOLVED | Mike Guenther | [ca-compliance] [smime-misissuance] | 2024-03-27T16:05:42Z |
| SwissSign: S/MIME NCP non ASCII symbols in email and SAN field wrong coding | 1914020 | RESOLVED | Sandy Balzer | [ca-compliance] [smime-misissuance] | 2024-09-13T16:35:26Z |
| SwissSign: S/MIME wrong key Usage | 1851164 | RESOLVED | Mike Guenther | [ca-compliance] [smime-misissuance] | 2023-09-22T22:43:36Z |
| SwissSign: Two certs issued with same issuer and serial number | 1404403 | RESOLVED | Corneia Enke | [ca-compliance] [ca-misissuance] | 2023-02-22T18:16:05Z |
| SwissSign: Undisclosed Intermediate Certificates | 1455132 | RESOLVED | Juerg.Eiholzer | [ca-compliance] [disclosure-failure] | 2023-02-22T18:20:53Z |
| SwissSign: wrong address in EV certificate | 1734131 | RESOLVED | Mike Guenther | [ca-compliance] [ev-misissuance] [ov-misissuance] | 2023-02-22T18:22:51Z |
| Symantec: Mis-issued test certificates by CrossCert | 1334377 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:31Z |
| Symantec: Non-audited, non-technically-constrained intermediate certificate | 1368178 | RESOLVED | Steven Medin | [ca-compliance] [audit-failure] | 2024-06-30T20:16:31Z |
| Symantec: Non-BR-Compliant Certificate Issuance | 1391067 | RESOLVED | Steven Medin | [ca-compliance] [ov-misissuance] [disclosure-failure] | 2023-02-22T18:26:45Z |
| T-Systems / DFN-PKI: 40 OV certificates with wrong ST | 1534580 | RESOLVED | Jürgen Brauckmann | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:48Z |
| T-Systems / DFN-PKI: 42 certificates with RSA modulus size in bits not divisable by 8 | 1651132 | RESOLVED | Jürgen Brauckmann | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:49Z |
| T-Systems / DFN-PKI: cablint findings, follow up to T-Systems Bug 1391074 | 1401486 | RESOLVED | Lothar Eickholt | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:40Z |
| T-Systems: "Internet Widgits Pty Ltd" in organizationName | 1638898 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:50Z |
| T-Systems: "Some-State" comparable issues | 1567456 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:51Z |
| T-Systems: "Some-State" in stateOrProvinceName | 1551371 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:52Z |
| T-Systems: DFN-PKI - Non-IDNA 2003 IDNs, violation of RFC 5280 | 1522080 | RESOLVED | Jürgen Brauckmann | [ca-compliance] | 2022-11-14T22:22:57Z |
| T-Systems: Improperly encoded QCStatements extension | 1498463 | RESOLVED | Bernd | [ca-compliance] [ev-misissuance] | 2023-02-22T18:13:41Z |
| T-Systems: Incorrect OCSP Delegated Responder Certificate | 1649941 | RESOLVED | Arnold Essing | [ca-compliance] [ocsp-failure] | 2023-02-22T18:12:53Z |
| T-Systems: Insufficient serial number entropy | 1536082 | RESOLVED | Arnold Essing | [ca-compliance] [uncategorized] | 2023-02-22T18:12:54Z |
| T-Systems: Invalid SAN Entries | 1530718 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:55Z |
| T-Systems: Issue with Organization field | 1578417 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:56Z |
| T-Systems: Non-BR-Compliant Certificate Issuance | 1391074 | RESOLVED | Lothar Eickholt | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:38Z |
| T-Systems: Non-BR-Compliant OCSP Responders | 1426009 | RESOLVED | Lothar Eickholt | [ca-compliance] [ocsp-failure] | 2023-02-22T18:21:39Z |
| T-Systems: Undisclosed Intermediate certificate | 1455137 | RESOLVED | Bernd | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:42Z |
| Taiwan-CA: Invalid SAN Entries | 1535869 | RESOLVED | Hao-Chun Li | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:35Z |
| Taiwan-CA: Invalid stateOrProvinceName | 1709070 | RESOLVED | Hao-Chun Li | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:36Z |
| Taiwan-CA: Misissued certificate: Invalid organizationUnitName | 1629020 | RESOLVED | Hao-Chun Li | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:37Z |
| Taiwan-CA: Non-BR-Compliant Certificate Issuance | 1391068 | RESOLVED | Robin Lin | [ca-compliance] [ev-misissuance] | 2023-02-22T18:25:26Z |
| Telekom Security: Certificate with invalid FQDN | 1711432 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:12:57Z |
| Telekom Security: Improper use of a domain validation method | 1825780 | RESOLVED | Arnold Essing | [ca-compliance] Next update 2023-04-21 | 2023-07-05T19:37:15Z |
| Telekom Security: CRL also contained unrevoked certificates | 1655698 | RESOLVED | Arnold Essing | [ca-compliance] [crl-failure] | 2023-02-22T18:12:58Z |
| Telekom Security: CRL-Entries with wrong CRL Reason Codes | 1914383 | RESOLVED | Arnold Essing | [ca-compliance] [crl-failure] | 2024-12-11T20:55:23Z |
| Telekom Security: Delayed Revocations of Sub-CA certificates | 1651487 | RESOLVED | Arnold Essing | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:12:59Z |
| Telekom Security: Finding in 2020 ETSI-Audit regarding weekly review of changes to configurations | 1651611 | RESOLVED | Arnold Essing | [ca-compliance] [audit-finding] | 2023-02-22T18:13:00Z |
| Telekom Security: Key Encipherment in two ECC SAN TLS certificates | 1703528 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:01Z |
| Telekom Security: Multiple commonName in certificates | 1705791 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2023-02-22T18:13:02Z |
| Telekom Security: QCStatement with http link to PDS | 1957962 | RESOLVED | Stefan Kirch | [close on 2025-05-21] [ca-compliance] [uncategorized] | 2025-05-22T14:42:14Z |
| Telekom Security: Revocation delay for TLS certificates with basicConstraints not marked as critical | 1877388 | RESOLVED | Arnold Essing | [ca-compliance] [leaf-revocation-delay] | 2025-03-14T16:58:34Z |
| Telekom Security: TLS certificates with basicConstraints not marked as critical | 1875820 | RESOLVED | Arnold Essing | [ca-compliance] [ov-misissuance] | 2024-08-03T09:37:19Z |
| Telekom Security: Wrong jurisdiction entries in certificates | 1675314 | RESOLVED | Arnold Essing | [ca-compliance] [ev-misissuance] | 2023-02-22T18:13:03Z |
| Telia: Misissued certificate - wrong OrganizationName value "Hair 8 Brains" | 1828105 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-06-30T16:29:21Z |
| Telia: "Some-State" in stateOrProvinceName | 1551372 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:49Z |
| Telia: AIA CA Issuer field pointing to PEM encoded cert | 1637854 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:43Z |
| Telia: Ambiguity on KeyUsage with ECC public key | 1612332 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:44Z |
| Telia: Certificates Issued with lower case value in subject:countryName | 1896108 | RESOLVED | Antti Backman | [ca-compliance] [ov-misissuance] | 2024-09-06T04:14:42Z |
| Telia: Certificates with RSA keys where modulus is not divisible by 8 | 1674536 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:23:45Z |
| Telia: Delayed revocation of 5 EE certificates in connection to id=1736020 | 1737808 | RESOLVED | pekka.lahtiharju | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:23:46Z |
| Telia: Delayed revocation of seven (7) certificates related to incident 1896108 | 1896553 | RESOLVED | Antti Backman | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-12T17:10:11Z |
| Telia: Disallowed curve (P-521) in leaf certificate | 1689589 | RESOLVED | pekka.lahtiharju | [ca-compliance] [dv-misissuance] | 2023-02-22T18:23:50Z |
| Telia: Failure to disclose Unconstrained Intermediate within 7 Days | 1563575 | RESOLVED | pekka.lahtiharju | [ca-compliance] [disclosure-failure] | 2023-02-22T18:23:51Z |
| Telia: Findings in 2023 Audit | 1841247 | RESOLVED | Antti Backman | [ca-compliance] [audit-finding] | 2024-05-09T23:39:15Z |
| Telia: Findings in 2024 Audit | 1936741 | RESOLVED | Antti Backman | [ca-compliance] [audit-finding] | 2024-12-20T18:03:11Z |
| Telia: Findings in Audit 2023 | 1877680 | RESOLVED | Antti Backman | [ca-compliance] [audit-finding] Next update 2024-04-24 | 2024-07-15T14:40:49Z |
| Telia: Intermediate Cert(s) Not Disclosed in CCADB | 1451953 | RESOLVED | Wayne Thayer | [ca-compliance] [disclosure-failure] | 2024-05-09T23:39:02Z |
| Telia: Invalid email contact address was used for few domains | 1736020 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:47Z |
| Telia: invalid IP value in SAN DNS field | 1524567 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:52Z |
| Telia: Issued three precertificates with non-NIST EC curve | 1738207 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:48Z |
| Telia: misissued certificate - FQDN value incorrectly in SAN rfc822 field | 1528259 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:53Z |
| Telia: Misissued certificate - FQDN without domain part (e_dnsname_not_valid_tld) | 1528261 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:54Z |
| Telia: Misissued certificate - invalid dnsName | 1524050 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:55Z |
| Telia: Misissued certificate - Invalid OU value "-" | 1528264 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:56Z |
| Telia: Misissued certificate - Invalid wildcard format | 1528263 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ov-misissuance] | 2023-02-22T18:23:57Z |
| Telia: Non-BR-Compliant OCSP Responder | 1426247 | RESOLVED | pekka.lahtiharju | [ca-compliance] [ocsp-failure] | 2023-02-22T18:23:59Z |
| Telia: Qualified Audit Statements | 1475115 | RESOLVED | pekka.lahtiharju | [ca-compliance] [audit-finding] | 2023-02-22T18:24:00Z |
| Telia: Qualified BR Audit Statement | 1565270 | RESOLVED | pekka.lahtiharju | [ca-compliance] [audit-finding] | 2023-02-22T18:24:01Z |
| Telia: Qualified BR Audit Statement 2020 | 1649683 | RESOLVED | pekka.lahtiharju | [ca-compliance] [audit-finding] | 2023-02-22T18:24:02Z |
| Telia: S/MIME Certificate issued to expired domain | 1920659 | RESOLVED | Antti Backman | [ca-compliance] [smime-misissuance] | 2024-12-06T16:16:14Z |
| Telia: S/MIME certificates issued in violation of S/MIME BR v1.0.1 | 1856591 | RESOLVED | Antti Backman | [ca-compliance] [smime-misissuance] Next update at 23.2.2024 | 2024-01-26T17:08:50Z |
| Telia: TLS certificates issued in violation of TLS BR v2.0.1 | 1859314 | RESOLVED | Antti Backman | [ca-compliance] [ov-misissuance] | 2024-01-26T17:08:38Z |
| Telia: Two Intermediate CA certificates not listed in audit report | 1614311 | RESOLVED | pekka.lahtiharju | [ca-compliance] [audit-failure] | 2024-06-30T20:16:48Z |
| TrustCor: Incorrect CA-Issuers URI | 1568356 | RESOLVED | Neil Dunbar | [ca-compliance] [dv-misissuance] | 2023-02-22T18:23:12Z |
| TrustCor: Insufficient Serial Number Entropy | 1532399 | RESOLVED | Neil Dunbar | [ca-compliance] [ov-misissuance] [dv-misissuance] | 2023-02-22T18:23:13Z |
| TrustCor: No mention of TLS-capable Intermediate CAs in WTBR audit reports | 1599503 | RESOLVED | Neil Dunbar | [ca-compliance] [audit-failure] | 2024-06-30T20:17:34Z |
| TrustCor: Non-audited intermediate certificates | 1579284 | RESOLVED | Neil Dunbar | [ca-compliance] [audit-failure] | 2023-02-22T18:23:14Z |
| TrustCor: Non-revocation of CA certificates within 7 days | 1599571 | RESOLVED | Neil Dunbar | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:23:16Z |
| Trustis: Gap between audit periods | 1623472 | RESOLVED | Blake Morgan | [ca-compliance] [audit-failure] | 2023-02-22T18:13:44Z |
| Trustis: Non-Br-Compliant OCSP Responder | 1426249 | RESOLVED | Blake Morgan | [ca-compliance] [ocsp-failure] | 2023-02-22T18:13:45Z |
| Trustis: SHA-1 serverAuth cert issued in November 2016 | 1353838 | RESOLVED | Kathleen Wilson | [ca-compliance] [ov-misissuance] | 2023-02-22T18:21:32Z |
| Trustwave: Certs issued with same issuer and serial number | 1405826 | RESOLVED | fcorday | [ca-compliance] [ca-misissuance] | 2023-02-22T18:17:39Z |
| TunTrust: CRL and OCSP unavailable | 1895312 | RESOLVED | TunTrust | [ca-compliance] [crl-failure] [ocsp-failure] | 2024-09-18T20:12:11Z |
| Tuntrust: Failure to Respond to April 2023 Survey | 1838860 | RESOLVED | Agence Nationale de Certification Electronique | [ca-compliance] [disclosure-failure] | 2023-09-29T15:33:22Z |
| TunTrust: OCSP unreachable | 1663953 | RESOLVED | Agence Nationale de Certification Electronique | [ca-compliance] [ocsp-failure] | 2023-02-22T18:24:31Z |
| TurkTrust: Failure to respond to January 2018 survey | 1439127 | RESOLVED | Atilla Biler | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:18Z |
| TurkTrust: Non-audited, non-technically-constrained intermediate certs | 1367842 | RESOLVED | Atilla Biler | [ca-compliance] [disclosure-failure] | 2023-02-22T18:13:19Z |
| TWCA: "unknown" OCSP response for issued certificates | 1793445 | RESOLVED | Hao-Chun Li | [ca-compliance] [ocsp-failure] | 2023-04-19T22:26:05Z |
| TWCA: CA certificate without EKU | 1848306 | RESOLVED | Hao-Chun Li | [ca-compliance] [ca-misissuance] Next update 31-Oct-2023 | 2023-11-02T16:08:16Z |
| TWCA: Intermediate CA Certificate Missing from Audit Reports | 1716670 | RESOLVED | Hao-Chun Li | [ca-compliance] [audit-failure] | 2024-06-30T20:17:54Z |
| TWCA: Missing or Inconsistent Disclosure of S/MIME BR Audits | 1952639 | RESOLVED | chtsai | [ca-compliance] [audit-failure] | 2025-05-25T18:27:21Z |
| TWCA: Policy OID not set to indicate the assurance level to the issued certs | 1738778 | RESOLVED | Hao-Chun Li | [ca-compliance] [ov-misissuance] | 2023-02-22T18:18:39Z |
| TWCA: Revocation delay for EV TLS certificates with invalid subject attribute order | 1884568 | RESOLVED | Hao-Chun Li | [ca-compliance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-14T17:03:36Z |
| TWCA: Revocation delay for TLS certificates with non-critical basicConstraints | 1886110 | RESOLVED | chtsai | [ca-compliance] [ov-misissuance] [leaf-revocation-delay] Next update 2025-03-03 | 2025-02-14T17:03:21Z |
| TWCA: TLS certificates with non-critical basicConstraints | 1885132 | RESOLVED | Hao-Chun Li | [ca-compliance] [ov-misissuance] [ev-misissuance] | 2024-07-12T06:03:45Z |
| TWCA: TLS EV certificates with invalid subject attribute order | 1883620 | RESOLVED | Hao-Chun Li | [ca-compliance] [ev-misissuance] Next update 2024-06-30 | 2024-07-03T13:28:19Z |
| TWCA: Undisclosed CA | 1848240 | RESOLVED | Hao-Chun Li | [ca-compliance] [disclosure-failure] Next update 31-Oct-2023 | 2023-11-02T16:08:00Z |
| UniTrust: EV certificate with wildcard domain in common name and SAN | 1787537 | RESOLVED | chenxiaotong | [ca-compliance] [ev-misissuance] | 2023-04-19T22:24:53Z |
| VikingCloud: Delayed preliminary report of CPR to affected Subscribers | 1888667 | RESOLVED | u671069 | [ca-compliance] [policy-failure] | 2024-06-05T21:27:01Z |
| VikingCloud: Incorrect OCSP Response | 1858965 | RESOLVED | u671069 | [ca-compliance] [ocsp-failure] | 2024-01-10T19:43:33Z |
| VikingCloud: Incorrect organizationName | 1826235 | RESOLVED | Janet Hines | [ca-compliance] [ov-misissuance] | 2023-09-02T17:58:32Z |
| VikingCloud: OV Precertificates with incorrect Subject RDN encoding order | 1883779 | RESOLVED | u671069 | [ca-compliance] [ov-misissuance] | 2024-06-05T21:27:22Z |
| Visa: Non-BR-Compliant Certificate Issuance | 1391087 | RESOLVED | Marcelo B. Silva | [ca-compliance] [ev-misissuance] | 2023-02-22T18:22:28Z |
| Visa: Non-BR-Compliant OCSP Responders | 1398261 | RESOLVED | Marcelo B. Silva | [ca-compliance] [ocsp-failure] | 2023-02-22T18:22:29Z |
| Visa: Qualified Audit Statements | 1485851 | RESOLVED | PKI Policy | [ca-compliance] [audit-finding] | 2023-02-22T18:24:32Z |
| Web.com: Failure to respond in time to revocation requests | 1723121 | RESOLVED | Keith McKenney | [ca-compliance] [leaf-revocation-delay] [policy-failure] | 2023-02-22T18:21:02Z |
| Web.com: Overdue Audit Statements 2021 | 1721473 | RESOLVED | Keith McKenney | [ca-compliance] [audit-failure] [audit-delay] | 2024-06-30T19:48:43Z |
| WISeKey: Bad ECDSA algorithm encoding in test certificate | 1804587 | RESOLVED | Pedro Fuentes | [ca-compliance] [ov-misissuance] | 2023-02-03T22:28:11Z |
| WISeKey: Failure to disclose intermediate in CCADB | 1503638 | RESOLVED | Pedro Fuentes | [ca-compliance] [disclosure-failure] | 2023-02-22T18:24:08Z |
| WISeKey: Failure to meet revocation deadline | 1610767 | RESOLVED | Pedro Fuentes | [ca-compliance] [leaf-revocation-delay] | 2023-02-22T18:24:10Z |
| WISeKey: Failure to revoke ICA Certificates within 7 days (OCSP EKU) | 1651730 | RESOLVED | Pedro Fuentes | [ca-compliance] [ca-revocation-delay] | 2023-02-22T18:24:11Z |
| WISeKey: Incorrect businessCategory in EV certificate | 1808485 | RESOLVED | Pedro Fuentes | [ca-compliance] [ev-misissuance] | 2023-02-03T22:27:55Z |
| WISeKey: Incorrect OCSP Delegated Responder Certificate | 1649939 | RESOLVED | Pedro Fuentes | [ca-compliance] [ocsp-failure] [covid-19] | 2023-02-22T18:24:12Z |
| WISeKey: Insufficient Serial Number Entropy | 1540281 | RESOLVED | Pedro Fuentes | [ca-compliance] [uncategorized] | 2023-02-22T18:24:13Z |
| WISeKey: Issuance of certificate with non-DER encoded keyUsage | 1793692 | RESOLVED | Pedro Fuentes | [ca-compliance] [ocsp-failure] | 2023-02-22T18:24:14Z |
| WISeKey: Issuance of certificate with two potentially conflicting policy OIDs | 1626868 | RESOLVED | Pedro Fuentes | [ca-compliance] [dv-misissuance] | 2023-02-22T18:24:15Z |
| WISeKey: Non-BR-Compliant Certificate Issuance | 1391089 | RESOLVED | Pedro Fuentes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:16Z |
| WISeKey: OCSP responding "Unauthorized" for a TLS certificate | 1903823 | RESOLVED | Pedro Fuentes | [ca-compliance] [ocsp-failure] | 2024-07-31T18:31:26Z |
| WISeKey: Pre-certificates revoked with certificateHold reason | 1824257 | RESOLVED | Pedro Fuentes | [ca-compliance] [crl-failure] | 2023-05-04T21:28:09Z |
| WISeKey: Revocation of multiple intermediate CAs | 1549308 | RESOLVED | Wayne Thayer | [ca-compliance] | 2022-11-14T22:22:57Z |
| WISeKey: S/MIME certificate issuance without proper validation | 1949755 | RESOLVED | Pedro Fuentes | [ca-compliance] [smime-misissuance] | 2025-04-11T15:59:46Z |
| WISeKey: Typo in Organization field | 1609501 | RESOLVED | Pedro Fuentes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:17Z |
| WISeKey: Unofficial DBA in Organization field | 1614290 | RESOLVED | Pedro Fuentes | [ca-compliance] [ov-misissuance] | 2023-02-22T18:24:18Z |
1386 Total; 0 Open (0%); 1383 Resolved (99.78%); 3 Verified (0.22%);
Delayed Revocation
No results.
0 Total; 0 Open (0%); 0 Resolved (0%); 0 Verified (0%);