Closed Bug 1266942 Opened 10 years ago Closed 9 years ago

StartCom: IV without localityName or stateOrProvinceName

Categories

(CA Program :: CA Certificate Root Program, task)

Product:
CA Program
Component:
CA Certificate Root Program
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: kurt, Assigned: kathleen.a.wilson)

References

Details

(Whiteboard: BR Compliance)

Hi, This certificate: https://crt.sh/?id=17123664&opt=x509lint,cablint Is an individual‐validated certificate. The BRs require that either the localityName or stateOrProvinceName is present.
Blocks: BR-Compliance
Looking into it right away!
We found 6 IV certificates with a similar issue - we are offering a replacement to the subscribers and revoke the in-compliant certificates. Some additional verification step might be necessary in order to confirm the locality which might take a little while though. The verification teams have been updated and I'll report back when all has been done.
Summary: startcom: IV without organzationName → startcom: IV without localityName or stateOrProvinceName
Whiteboard: BR Compliance
Summary: startcom: IV without localityName or stateOrProvinceName → StartCom: IV without localityName or stateOrProvinceName
Resolving; if StartCom becomes trusted again, they are unlikely to have the same issues. Gerv
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Resolution: --- → WONTFIX
Product: mozilla.org → NSS
Product: NSS → CA Program
You need to log in before you can comment on or make changes to this bug.