1294276 - Cihaz Sertifikası Hizmet Sağlayıcısı - Sürüm 3 issuing certificates without subject alternative name extensions

Status: RESOLVED FIXED

(CA Program :: CA Certificate Root Program, task)

Description

[Dana Keeler (she/her) [:keeler]]

Cihaz Sertifikası Hizmet Sağlayıcısı - Sürüm 3 has as recently as December of 2015 issued certificates without a subject alternative name extension. See for example https://crt.sh/?id=11626595&opt=cablint
As there are no publicly-logged certificates issued after this time, it's unclear if this is an ongoing issue or if this has already been resolved.

Comment 1

[Kathleen Wilson]

Tuğba, I believe this subCA chains up to one of the Kamu SM root certs. If so, please confirm that this customer has stopped issuing SSL certs that don't have the dNSNames in the subjectAltName extension. Then, please close this bug.

Comment 2

[Tuğba ÖZCAN]

Kathleen and David,
Yes, this subCA chains up to one of the Kamu SM root certs. But, this SubCA has stopped issuing SSL certs. 
In terms of conformity to  CAB Forum BR, our new sub Root (Cihaz Sertifikası Hizmet Sağlayıcısı - Sürüm  4 - http://depo.kamusm.gov.tr/ssl/CSHS.v4.cer  ) issues certificates that must have the dNSNames in the subjectAltName extension since 12/18/2015.