CA/Incident Dashboard
From MozillaWiki
< CA
Contents
Open CA Bugs in Bugzilla
Open CA Compliance Bugs
A CA compliance bug relates to a concern about a CA's certificates failing to comply with Mozilla's CA Certificate Policy and/or the CA/Browser Forum's Baseline Requirements, and is determined to not be an imminent security concern.
Anyone may create a CA Compliance bug as follows:
- https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS&component=CA%20Certificate%20Compliance
- Whiteboard = [ca-compliance]
| ID | Summary | Status | Assigned to | Whiteboard | Last change time |
|---|---|---|---|---|---|
| 1390990 | D-TRUST: Non-BR-Compliant Certificate Issuance | NEW | Arno Fiedler | [ca-compliance] | 2019-01-16T14:43:39Z |
| 1391074 | T-Systems: Non-BR-Compliant Certificate Issuance | ASSIGNED | Lothar Eickholt | [ca-compliance] Next Update - 21-January 2019 | 2019-01-17T14:57:55Z |
| 1448986 | Entrust - IP Address in dNSName form | ASSIGNED | Bruce Morton | [ca-compliance] - Next Update - 01-April 2019 | 2019-01-17T14:59:02Z |
| 1455137 | T-Systems: Undisclosed Intermediate certificate | NEW | Bernd | [ca-compliance] | 2019-01-18T10:43:27Z |
| 1456655 | ABB issues with DN, country code and keyUsage | UNCONFIRMED | Brenda Bernal | [ca-compliance] | 2019-01-15T19:11:17Z |
| 1462423 | NetLock: CN not in SAN | UNCONFIRMED | Varga Viktor | [ca-compliance] | 2019-01-15T17:57:33Z |
| 1462797 | E-Tugra: Improper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString | NEW | Davut Tokgöz | [ca-compliance] | 2019-01-14T18:40:48Z |
| 1463975 | [GRCA] Misissued certificates: Invalid commonName, commonName not in SAN | NEW | National Development Council | [ca-compliance] | 2019-01-16T10:57:49Z |
| 1466252 | Cybertrust Japan: three test websites not provided | ASSIGNED | masahiro.shikutani | [ca-compliance] - Next update 19-Oct-2018 | 2019-01-17T14:55:23Z |
| 1468477 | QuoVadis (Freistaat Bayern): Non-BR-compliant Key Usage | ASSIGNED | Stephen Davidson | [ca-compliance] Next Update - 01-January 2020 | 2019-01-16T21:46:15Z |
| 1475115 | Telia: Qualified Audit Statements | ASSIGNED | pekka.lahtiharju | [ca-compliance] Next Update - 1-February 2019 | 2019-01-17T14:54:10Z |
| 1481862 | Camerfirma: MULTICERT organizationName Too Long | REOPENED | Juan Angel Martin | [ca-compliance] Next Update - 14-February 2019 | 2019-01-17T15:25:36Z |
| 1492006 | Comodo: Failure to revoke within 24 hours | ASSIGNED | Robin Alden | [ca-compliance] Next Update - 24-January 2019 | 2019-01-17T15:00:19Z |
| 1495497 | KIR S.A.: Certificates issued with multiple BR violations | ASSIGNED | Piotr Grabowski | [ca-compliance] | 2019-01-16T23:56:19Z |
| 1495507 | Government of Spain FNMT: OU exceeds 64 characters | ASSIGNED | Rafa Medina | [ca-compliance] Next Update - 1-February 2019 | 2019-01-17T14:54:29Z |
| 1495518 | Assecco DS / Certum: Unallowed key usage for EC public key (Key Encipherment) | ASSIGNED | Wojciech Trapczyński | [ca-compliance] - Next Update - 01-July 2019 | 2019-01-17T15:00:50Z |
| 1495524 | Certinomis: Unqualified Domain Name in SAN | ASSIGNED | Marc MAITRE | [ca-compliance] - Next Update - 01-January 2019 | 2019-01-17T14:55:03Z |
| 1496088 | Certinomis: certificate for test.com, O=Entreprise TEST | UNCONFIRMED | Marc MAITRE | [ca-compliance] | 2019-01-14T18:01:29Z |
| 1496616 | Consorci: Qualified audit statements | ASSIGNED | Francesc Ferrer | [ca-compliance] Next Update - 01-January 2020 | 2019-01-09T18:53:55Z |
| 1498463 | T-Systems: Improperly encoded QCStatements extension | NEW | Bernd | [ca-compliance] | 2019-01-09T15:28:03Z |
| 1502957 | Camerfirma: MULTICERT Misissuance and missing audits | ASSIGNED | Juan Angel Martin | [ca-compliance] - Next Update - 07-March 2019 | 2019-01-17T14:54:44Z |
| 1503128 | Certinomis: email address in DNS SAN | UNCONFIRMED | Marc MAITRE | [ca-compliance] | 2019-01-17T19:32:19Z |
| 1506607 | SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier | ASSIGNED | Mike Guenther | [ca-compliance] - Next Update - 01-February 2019 | 2019-01-17T15:01:08Z |
| 1507376 | TÜViT: Issues with T-Systems Audits | NEW | Matthias Wiedenhorst | [auditor-compliance] | 2019-01-10T17:57:03Z |
| 1509002 | Camerfirma: MULTICERT certificates with a validity period greater than 825 days | UNCONFIRMED | Eusebio Herrera | [ca-compliance] | 2019-01-16T19:16:48Z |
| 1509512 | Incident report D-TRUST: syntax error in one tls certificate | UNCONFIRMED | Enrico Entschew | [ca-compliance] | 2019-01-16T16:42:45Z |
| 1512018 | Entrust: Certificate issued with '-' in ST field | UNCONFIRMED | Bruce Morton | [ca-compliance] | 2019-01-17T19:15:31Z |
| 1515788 | DigiCert: Underscores - CVS Pharmacy | UNCONFIRMED | Jeremy Rowley | [ca-compliance] | 2019-01-18T05:56:18Z |
| 1516453 | DigiCert: Underscores - Discover | UNCONFIRMED | Jeremy Rowley | [ca-compliance] | 2019-01-18T06:04:52Z |
| 1516545 | DigiCert: Underscores - Verizon | UNCONFIRMED | Jeremy Rowley | [ca-compliance] | 2019-01-18T06:01:17Z |
| 1516561 | DigiCert: Underscores - Canadian Imperial Bank of Commerce | ASSIGNED | Brenda Bernal | [ca-compliance] | 2019-01-18T06:06:26Z |
| 1516599 | DigiCert: Underscores - Ericsson | UNCONFIRMED | Jeremy Rowley | [ca-compliance] | 2019-01-17T14:52:08Z |
| 1517617 | DigiCert: Underscores - Citi | UNCONFIRMED | Jeremy Rowley | [ca-compliance] | 2019-01-18T05:59:24Z |
| 1518553 | Sectigo: Use of forbidden subjectPublicKeyInfo algorithm | ASSIGNED | Robin Alden | [ca-compliance] Next Update - 17-January 2019 | 2019-01-14T18:17:50Z |
| 1518560 | Asseco DS / Certum: Use of forbidden subjectPublicKeyInfo algorithm | ASSIGNED | Wojciech Trapczyński | [ca-compliance] | 2019-01-16T19:19:43Z |
| 1519260 | QuoVadis: Multiple unreported misissuances in 2018 | ASSIGNED | Stephen Davidson | [ca-compliance] - Next Update - 01-July 2019 | 2019-01-17T14:58:04Z |
| 1519265 | QuoVadis: Recap of BR Compliance in 2018 issuance by external subCAs | UNCONFIRMED | Wayne Thayer [:wayne] | [ca-compliance] | 2019-01-11T00:12:16Z |
| 1519572 | DigiCert: Underscores - Intuit | UNCONFIRMED | Brenda Bernal | [ca-compliance] | 2019-01-18T06:03:25Z |
| 1520299 | Hongkong Post / Certizen: Failure to report misissuance | ASSIGNED | Man Ho | [ca-compliance] | 2019-01-18T12:23:55Z |
| 1520876 | Entrust: Late mis-issue certificate revocation | ASSIGNED | Bruce Morton | [ca-compliance] | 2019-01-17T20:25:51Z |
40 Total; 40 Open (100%); 0 Resolved (0%); 0 Verified (0%);
Closed CA Bugs
Closed CA Compliance Bugs
A historical view of past CA compliance bugs may be found here:
