1017138 - Vodafone: no subject alternative name

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task)

Description

[Kurt Roeckx]

I'm seeing recent certificates without the subject alternative name extension from the following path:
CN = Baltimore CyberTrust Root, OU = CyberTrust, O = Baltimore, C = IE
CN = Vodafone (Corporate Domain 2009), O = Vodafone Group, C = UK
CN = Vodafone (Corporate Services 2009), O = Vodafone Group, C = UK

Comment 1

[Kathleen Wilson]

Steven, one more no-SAN bug...

Comment 2

[Steven Medin]

We are reiterating proper certificate content requirements to our OmniRoot subordinate customer and requesting an action plan to resolve this issue.

Comment 3

[Gervase Markham [:gerv]]

Steve: did Vodafone provide an action plan? What is it?

Gerv

Comment 4

[Steven Medin]

Gerv,

Vodafone state that they will remedy all affected certificates in October.  Resources and internal processes prevent the implementation of a third-party application in their CA software to support SANs until that time.

Comment 5

[Ben Wilson]

Vodafone indicate that they believe that the "no subject alternative names present" has been resolved and that any certificates have expired or been revoked. Is there a way that we can search to see if there are any remaining?

Comment 6

[Kathleen Wilson]

(In reply to Ben Wilson from comment #5)
> Vodafone indicate that they believe that the "no subject alternative names
> present" has been resolved and that any certificates have expired or been
> revoked. Is there a way that we can search to see if there are any remaining?

I don't know. Will close this bug as resolved/fixed, and a new bug can be created if it is found that such certs are still being issued by Vodafone.