1524878 - Asseco DS / Certum: IP in dnsName

Status: RESOLVED DUPLICATE of bug 1524195

(CA Program :: CA Certificate Compliance, task)

Description

[Jonathan Rudenberg]

Certum issued the following certificates with invalid dnsNames containing IP addresses.

I notified them at 2019-01-29 17:49 UTC via an email to their problem reporting address and received confirmation that they were investigating at 2019-01-30 12:49 UTC, however none of the certificates have been revoked yet.

https://crt.sh/?opt=zlint&id=13087593
https://crt.sh/?opt=zlint&id=16177837
https://crt.sh/?opt=zlint&id=20439645
https://crt.sh/?opt=zlint&id=57608191
https://crt.sh/?opt=zlint&id=68194677
https://crt.sh/?opt=zlint&id=102050109
https://crt.sh/?opt=zlint&id=103359040
https://crt.sh/?opt=zlint&id=108269205
https://crt.sh/?opt=zlint&id=113860047
https://crt.sh/?opt=zlint&id=150702035
https://crt.sh/?opt=zlint&id=154786555
https://crt.sh/?opt=zlint&id=282640864
https://crt.sh/?opt=zlint&id=282660693
https://crt.sh/?opt=zlint&id=282908416
https://crt.sh/?opt=zlint&id=282908722
https://crt.sh/?opt=zlint&id=282909346
https://crt.sh/?opt=zlint&id=1130552559

Comment 1

[Ryan Sleevi]

Wojciech: Please provide an Incident Report, as explained in https://wiki.mozilla.org/CA/Responding_To_An_Incident , regarding this and the failure to revoke.

Comment 2

[Wojciech Trapczyński]

Ryan: I believe that this bug (#1524878) duplicates #1524195 (https://bugzilla.mozilla.org/show_bug.cgi?id=1524195) that I submitted last week. Should I reply in #1524878 or in #1524195 or in both of them?

Comment 3

[Wayne Thayer]

Wociech: please respond in the bug that you created. Thank you.