Certificate Authority Incident Report

Every TLS incident in Mozilla's CA program, 1,581 across 108 CAs. One row each, linked to the Bugzilla bugs and Mozilla decisions it comes from.

January 1, 2017 to November 7, 2026

Certificate authority incident summary

The CAs with the most incidents. The biggest CAs lead because they issue the most certificates, so the per certificate views compare incidents to size. Scroll for more, and click a CA to see its incidents.

#1

DigiCert

132
incidents since 2017
20172026
Self reported
29%
Late revocations
43
Slow answers
44
Open now
9

0.91 incidents per million peak certificates

#2

Sectigo

95
incidents since 2017
20172026
Self reported
31%
Late revocations
19
Slow answers
49
Open now
6

0.55 incidents per million peak certificates

#3

IdenTrust

68
incidents since 2017
20172026
Self reported
62%
Late revocations
6
Slow answers
13
Open now
1

3.6 incidents per million peak certificates

#4

Microsoft

50
incidents since 2017
20172026
Self reported
38%
Late revocations
4
Slow answers
8
Open now
1

0.57 incidents per million peak certificates

#5DISTRUSTED 2024

Entrust

49
incidents since 2017
20172026
Self reported
59%
Late revocations
18
Slow answers
12
Open now
1

86 incidents per million peak certificates

#6

GlobalSign

49
incidents since 2017
20172026
Self reported
33%
Late revocations
10
Slow answers
13
Open now
2

23 incidents per million peak certificates

#7

GoDaddy

45
incidents since 2017
20172026
Self reported
36%
Late revocations
9
Slow answers
17
Open now
6

0.25 incidents per million peak certificates

#8

Asseco (Certum)

43
incidents since 2017
20172026
Self reported
26%
Late revocations
11
Slow answers
9
Open now
6

51 incidents per million peak certificates

#9

Netlock

39
incidents since 2017
20172026
Self reported
10%
Late revocations
8
Slow answers
38
Open now
10

15,169 incidents per million peak certificates

#10

SwissSign

38
incidents since 2017
20172026
Self reported
47%
Late revocations
8
Slow answers
12
Open now
4

701 incidents per million peak certificates

#11

Firmaprofesional

37
incidents since 2017
20172026
Self reported
11%
Late revocations
7
Slow answers
7
Open now
0

18,191 incidents per million peak certificates

#12

CFCA

35
incidents since 2017
20172026
Self reported
20%
Late revocations
8
Slow answers
8
Open now
3

5,566 incidents per million peak certificates

#13

Google Trust Services

35
incidents since 2017
20172026
Self reported
66%
Late revocations
2
Slow answers
9
Open now
0

0.073 incidents per million peak certificates

#14

D-Trust

34
incidents since 2017
20172026
Self reported
38%
Late revocations
6
Slow answers
11
Open now
8

179 incidents per million peak certificates

#15

Let's Encrypt

34
incidents since 2017
20172026
Self reported
47%
Late revocations
6
Slow answers
5
Open now
3

0.047 incidents per million peak certificates

#16DISTRUSTED 2026

eMudhra

33
incidents since 2017
20172026
Self reported
12%
Late revocations
6
Slow answers
9
Open now
10

283 incidents per million peak certificates

#17

SSL.com

32
incidents since 2017
20172026
Self reported
22%
Late revocations
6
Slow answers
7
Open now
7

0.76 incidents per million peak certificates

#18

SHECA

29
incidents since 2017
20172026
Self reported
14%
Late revocations
4
Slow answers
7
Open now
5

869 incidents per million peak certificates

#19

SECOM

28
incidents since 2017
20172026
Self reported
14%
Late revocations
9
Slow answers
3
Open now
2

138 incidents per million peak certificates

#20

Telia

28
incidents since 2017
20172026
Self reported
39%
Late revocations
6
Slow answers
6
Open now
2

710 incidents per million peak certificates

Severity mix: Critical High Medium Low

List of certificate authorities

Severity mix: Critical High Medium Low

Details
Let's Encrypt729.2M340.0473

Let's Encrypt has had 34 incidents since 2017, against a peak of 729,196,049 certificates in use at once: 0.047 incidents per million peak certificates.

Peak certificates
729,196,049, November 2026
Where the peak comes from
Certificates in use in November 2026, from Let's Encrypt's own statistics
Severity
6 high, 22 medium, 6 low
Found by the CA itself
47%
Late revocations
6
Slow answers
5
Open now
3
Incidents per year
20172026

Links: [its 34 incidents] [Let's Encrypt stats] [certkit.io/blog]
Google Trust Services476.7M350.0730
Amazon Trust Services285.2M150.0530
GoDaddy180.9M450.256
Sectigo171.9M950.556
DigiCert145.1M1320.919
Microsoft88.2M500.571
SSL.com42.0M320.767
IdenTrust18.9M683.61
Comodo now Sectigo11.5M131.10
Symantec distrusted 2017 now DigiCert5.3M50.950
GlobalSign2.2M49232
Actalis1.9M23124
TrustAsia1.6M53.02
HARICA1.1M15132
Asseco (Certum)835K43516
Entrust distrusted 2024 now Sectigo572K49861
Apple558K17300
Certainly259K10390
SECOM203K281382
D-Trust190K341798
Buypass177K13731
eMudhra distrusted 2026117K3328310
TWCA91K171885
DFN-PKI56K91611
SwissSign54K387014
Cybertrust Japan47K122541
QuoVadis now DigiCert46K61300
AT&T42K2n/a0
Telia39K287102
PKIoverheid37K61621
Telekom Security35K236644
SHECA33K298695
SecureTrust now SSL.com28K196760
KPN22K52280
TrustCor distrusted 202219K52580
NAVER Cloud16K148842
Chunghwa Telecom13K272,0911
Camerfirma distrusted 2021 now InfoCert (Camerfirma)9,350272,8880
WISeKey7,639131,7020
CFCA6,288355,5663
E-Tugra distrusted 20235,292142,6460
ACCV5,024101,9904
certSIGN4,570255,4706
DocuSign (Keynectis)4,45751,1220
FNMT3,885194,8914
Certigna3,771215,5692
Hongkong Post3,51282,2781
Microsec2,991165,3491
OATI2,9122n/a0
Netlock2,5713915,16910
Consorci AOC2,25883,5431
Firmaprofesional2,0343718,1910
DVV1,8001n/a0
Atos1,54553,2362
Izenpe1,4562215,1105
Certinomis distrusted 20191,3812014,4820
InfoCert1,2073n/a0
GDCA1,10965,4100
KIRn/a16n/a0
ANF ACn/a13n/a1
Disign/a13n/a2
iTrusChinan/a12n/a2
GLOBALTRUST (e-commerce monitoring) distrusted 2024n/a8n/a0
CommScopen/a7n/a0
Kamu SMn/a7n/a1
MULTICERTn/a7n/a1
TunTrustn/a7n/a0
BJCAn/a4n/a0
GRCAn/a4n/a0
Network Solutionsn/a4n/a0
Visan/a4n/a0
Intesa Sanpaolon/a3n/a0
SK ID Solutionsn/a3n/a0
Siemensn/a3n/a0
Swiss BIT (FOITT)n/a3n/a0
Trustisn/a3n/a0
Verizonn/a3n/a0
WoSignn/a3n/a0
Certicamaran/a2n/a0
Certisignn/a2n/a0
Government of Korean/a2n/a0
Government of Portugaln/a2n/a0
PostSignumn/a2n/a0
TurkTrust distrusted 2018n/a2n/a0
A-Trustn/a1n/a0
ABBn/a1n/a0
AGCEn/a1n/a0
ANCERTn/a1n/a0
Byte Computern/a1n/a0
CIBGn/a1n/a0
Carillonn/a1n/a0
DarkMattern/a1n/a0
Digidentityn/a1n/a0
EDICOMn/a1n/a0
Echoworxn/a1n/a0
Finan/a1n/a0
Freistaat Bayernn/a1n/a0
ICP-Brasiln/a1n/a1
IDRBTn/a1n/a0
LuxTrustn/a1n/a0
NISZn/a1n/a0
Procert distrusted 2017n/a1n/a0
SDAIAn/a1n/a0
Solutin/a1n/a0
Swisscomn/a1n/a0
Virginia Techn/a1n/a0
Wells Fargon/a1n/a0

Latest certificate authority incidents

1,581 incidents

Status CA Severity Category Found by
2026-11-06OPENeMudhraSeries A intermediates missing from 2024-25 audit reports
2026-11-04closed2026-11-05eMudhraroots distrusted by Mozilla
2026-11-04OPENBuypasscRLNumber reused across Root CA CRLs
2026-11-03OPEND-TrustEV TLS certificates missing subject attributes required by CSM CPS section 3.1.4reported in 1 day
2026-11-03OPENSectigoMismatch between organizationIdentifier and jurisdictionStateOrProvincereported in 3 days
2026-11-02OPENNetlockArany (Class Gold) root CRL entry for subordinate CA certificate without reasonCodereported in 2 days
2026-11-02OPENAtosFailure to respond to Certificate Problem Report within 24 hoursreported same day
2026-11-02OPENSECOMInsufficient randomness in serial numbers of two Cybertrust Japan subordinate CA certificatesreported in 3 days
2026-11-02OPENTWCASubscriber certificate serial numbers have 63 bits of CSPRNG output instead of 64 bits
2026-11-01OPENTWCAEV certificates with jurisdiction fields not matching the registration agency level
2026-10-31OPENHARICA2 truncated CRLs publishedreported in 1 day
2026-10-30OPENAsseco (Certum)Incorrect State or Province in certificatereported in 1 day
2026-10-29OPENTWCACA certificate serial numbers contain fewer than 64 bits of CSPRNG output
2026-10-29OPENIzenpenetwork communication outagereported in 6 days
2026-10-29OPENTWCAUnauthorized access to an RA server
2026-10-28OPENACCVDelayed Full Incident Report for Bug 2080796reported in 2 days
2026-10-28OPENSectigoMinor number of User Agents blocked on specific CRL domainsreported in 3 days
2026-10-28OPENcertSIGNRoot CRL validity set to 12 month instead of lessreported in 1 day
2026-10-27OPENMicrosoftAccess to CRLs on www.microsoft.com blocked for Wget User-Agentreported in 2 days
2026-10-27OPENIzenpeCRL not published within 24 hours of revocation
2026-10-26OPENFNMTOCSP Responder Certificate Profile Non-Compliancereported in 3 days
2026-10-26OPENIzenpeOCSP requests filtered by user-agentreported in 1 day
2026-10-26OPENPKIoverheidDelayed reporting of CCADB documentation non-compliance
2026-10-26OPENCertignaSerial number of a cross-signed CA certificate generated with java.util.Randomreported in 3 days
2026-10-26OPENAtosOCSP Responder certificate contains subjectAltName extensionreported same day
2026-10-25OPENeMudhraAccess to CRLs blocked for certain User-Agent headersreported same day
2026-10-24OPENDigiCertManual data entry error in CCADBreported in 2 days
2026-10-23OPENSSL.comEV JOI Subject Field Abbreviation and Registration Level Mismatchreported in 1 day
2026-10-23OPENIdenTrustIssuance of Subordinate CAs non-compliant with CP/CPSreported in 1 day
2026-10-23OPENcertSIGNCRL entry with reasonCode unspecifiedreported same day
2026-10-23OPENcertSIGNOCSP with bad KeyUsagereported same day
2026-10-23OPENTrustAsiaPremature Removal of CRL Entriesreported same day
2026-10-23OPENTeliaOCSP Responder Certificate does not have subject:countryName attributereported same day
2026-10-23OPENIzenpeNon-BR-Compliant OCSP Responder certificatereported same day
2026-10-23OPENDisigkeyUsage in OCSP responder certificate not marked criticalreported in 1 day
2026-10-23OPENSectigoLate account removal for deprecated Network Boundary Controlreported in 3 days
2026-10-23OPENSectigoLate review of accounts for a subsection of CA Systemsreported in 3 days
2026-10-22OPENNetlockPrecertificates issued by Precertificate Signing CA after 2026-03-15reported in 1 day
2026-10-21OPEND-TrustCertificate name encodings inconsistent with TSPS section 7.1.4
2026-10-21OPEND-TrustPublished Certificate Problem Report mechanism unavailablereported same day
2026-10-21OPENSHECAOCSP Responder Certificate contains certificatePolicies extensionreported in 2 days
2026-10-21OPENDigiCertUnauthorized access to business systemreported in 122 days
2026-10-21OPENCybertrust JapanMultiple Final Certificates with the Same Issuer and Serial Number Issued by Cybertrust Japanreported in 2 days
2026-10-20OPENSwissSignDelayed Response to CPR - Bugzilla 2083791reported in 1 day
2026-10-20OPENSHECAOCSP Responder Certificate with RSA Public Exponent 3reported in 1 day
2026-10-19OPENNetlockOutdated CP/CPS disclosure in CCADB for NetLock Arany (Class Gold) Főtanúsítványreported in 3 days
2026-10-19OPENcertSIGNOCSP responder certificate encoded subject attributes out of orderreported same day
2026-10-19OPENcertSIGNMissing localityName in an OV certificatereported in 3 days
2026-10-19OPENDFN-PKICRL validity period exceeds 10 days by one secondreported in 3 days
2026-10-19OPENAsseco (Certum)Delayed preliminary CPR response due to email address typoreported in 1 day
2026-10-18OPENDigiCertcRLNumber not increasing within one CRL scopereported in 2 days
2026-10-18OPENTrustAsiaCAA Mis-Issuancereported in 2 days
2026-10-18OPENeMudhraPrivate key compromise of Intermediate Certificates
2026-10-16OPENEntrustAffirmTrust and Entrust 4K roots — newest audit period ended 2025-02-28, statement 119 days late, no letter, no newer period on record
2026-10-16OPENConsorci AOCEC-ACC audit statement 123 days after period end, no letter, no audit period newer than 2024-03-28
2026-10-16OPENMULTICERTStandard audit statement 108 days after period end with no explanatory letter; TLS BR audit on record ended 2023-03-31
2026-10-16OPENICP-BrasilAutoridade Certificadora Raiz Brasileira v10 — audit statement 144 days after period end, no explanatory letter, no newer audit on record
2026-10-16OPENeMudhraCP/CPS documents not updated for current requirementsreported in 2 days
2026-10-16OPENACCVEKU Inconsistency in ACCV RSA1 TLS CA Certificates Identified During Chrome Root Inclusion Reviewreported in 3 days
2026-10-16OPENTelekom SecurityTypographical error in CPS section 7.1.6reported in 2 days
2026-10-16OPENeMudhraTLS certificates missing certificate-type policy OID required by CP/CPSreported in 2 days
2026-10-15OPENGoDaddySubscriber Certificate Profiles Did Not Conform to CP/CPSreported in 2 days
2026-10-15OPEND-TrustFinding #2 of 2 in 2026 ETSI Audit – Documentation of backup recovery testingreported same day
2026-10-15OPEND-TrustFinding #1 of 2 in 2026 ETSI Audit – vulnerability managementreported same day
2026-10-15closed2026-11-05KIRTLS certificates issued from legacy SZAFIR Trusted CA6 contrary to Chrome commitmentsreported in 2 days
2026-10-15OPENFNMTLate CP/CPS Update in CCADBreported in 3 days
2026-10-15OPENeMudhraTLS certificates exceed CP/CPS maximum validity period by one secondreported in 1 day
2026-10-15OPENAsseco (Certum)Incomplete CRL Disclosure in CCADB for intermediate CAs sharing the same subjects and public keys as root CAsreported in 3 days
2026-10-15OPENcertSIGNMissing the countryName attribute in the Subject DN of a test DV TLS certificatereported in 1 day
2026-10-15OPENCFCATest websites for EV roots serve OV certificatesreported in 3 days
2026-10-14OPENSSL.comTest websites for EV enabled Roots with non-EV certificatesreported in 2 days
2026-10-14OPENDigiCert Publishing timeline for CRLreported in 2 days
2026-10-14OPEND-TrustDiscrepancy in CRL URL Disclosuresreported in 2 days
2026-10-14OPENGlobalSignEV Test Certificates missing for 2 rootsreported in 2 days
2026-10-13closed2026-10-22Amazon Trust ServicesEV Root Test Web Pages Serve Non-EV (DV) Certificatesreported in 1 day
2026-10-13OPENNAVER CloudSubordinate CA certificates with two Reserved Certificate Policy Identifiersreported in 1 day
2026-10-13OPENANF ACPotential TLS BR 7.1.2.8 violations in OCSP responder certificatereported in 4 days
2026-10-13OPENeMudhraMissing EKU Extension in Subordinate CA Certificatesreported in 1 day
2026-10-13OPENSECOMIncorrect and missing EV TLS test websites in CCADBreported same day
2026-10-13OPENNAVER CloudCross-certificate with incorrect accessMethod (id-ad-ocsp instead of id-ad-caIssuers) in AIAreported in 3 days
2026-10-12closed2026-11-03WISeKeySpecific test websites for EV not listed in CCADBreported same day
2026-10-12OPENAsseco (Certum)Incorrect AlgorithmIdentifier Encoding in OCSP responsesreported in 3 days
2026-10-12OPENActalisNon-compliant OCSP responses and OCSP responder certificatereported in 3 days
2026-10-12closed2026-11-05SectigoLegacy Subordinate CA Certificate without digitalSignature KU signing OCSP responsesreported in 3 days
2026-10-12OPENACCVOCSP responses include “archiveCutoff” in “responseExtensions”reported in 3 days
2026-10-12OPENCFCACertificates Issued with lower case value in subject:countryNamereported in 2 days
2026-10-12OPENeMudhraDelegated OCSP Responder certificates containing cRLDistributionPoints extensionreported in 3 days
2026-10-12OPENTelekom SecurityOCSP responder uses incorrect signature algorithm for P-384 signing keyreported in 3 days
2026-10-12OPENCertignaFailure to announce completion of action item within prescribed time periodreported in 3 days
2026-10-12OPENiTrusChinaOCSP Response ECDSA signatureAlgorithm with NULL parametersreported in 3 days
2026-10-10closed2026-11-05BJCAOCSP responses with an empty singleExtensionsreported in 1 day
2026-10-09OPENTWCANon-critical basicConstraints in Delegated OCSP Responder Certificatesreported same day
2026-10-09closed2026-11-04NAVER CloudOCSP responses with an empty responseExtensionsreported same day
2026-10-09OPENKamu SMNon-BR-Compliant OCSP Response Validity Intervalreported same day
2026-10-08OPENGoDaddyCertificate Issuance Using Previously Compromised Private Keyreported in 1 day
2026-10-08OPENSwissSignIncorrectly encoded OCSP extensionreported in 2 days
2026-10-08OPENSwissSignRoot CRLs Missing Reason Codereported in 2 days
2026-10-06OPENDigiCertCertificates issued for sanctioned entitiesreported in 3 days
2026-10-05closed2026-10-28SectigoSigning infrastructure migration disrupted issuance of 2 CRLsreported in 2 days
2026-10-02OPENGoDaddyDelayed CRL Updatesreported in 1 day
2026-10-02OPENSSL.comInconsistent published CRL for one ICAreported in 2 days
2026-10-02OPENSectigoCertificates issued for sanctioned entitiesreported in 2 days
2026-10-02closed2026-10-28SectigoFailure to announce completion of action item within prescribed time periodreported in 2 days
2026-10-02OPENActalisRoot CA CRL not published within 24 hours after recording revocationsreported in 2 days
2026-10-02closed2026-11-04FirmaprofesionalAC Firmaprofesional - CA1 excluded from audit scopereported in 17 days
2026-10-01OPENiTrusChinaReusing CRLnumber and Missing NULL Parameter of CRL signatureAlgorithmreported in 1 day
2026-10-01OPENSHECAIncorrect Disclosure of Partitioned CRLs in CCADBreported in 1 day
2026-10-01OPENTelekom SecurityFailure in automatic issuance of CRLsreported in 1 day
2026-10-01OPENHongkong PostCRL HTTP endpoints returned legacy media type application/x-pkcs7-crlreported in 1 day
2026-09-30closed2026-10-15CertignaCRL HTTP Media Typereported same day
2026-09-28closed2026-11-06AppleCRL is signed incorrectlyreported in 3 days
2026-09-28OPENIzenperevocation reason code not included in CRL issued by Rootreported in 3 days
2026-09-28OPENSSL.comCRL URL typo in CRL URL disclosed to CCADBreported in 3 days
2026-09-28OPENTelekom SecurityFailure to respond to a certificate problem report within 24 hoursreported same day
2026-09-28closed2026-11-04DFN-PKIcrlEntryExtensions SEQUENCE of size 0reported in 3 days
2026-09-27OPENDigiCertRevocation of Undisclosed Issuing CAsreported in 2 days
2026-09-26OPENDisigCRL contains not allowed attributesreported in 1 day
2026-09-26OPENSHECAECC CRL/OCSP Signature Algorithm Issuereported in 1 day
2026-09-26closed2026-10-12Kamu SMMissing CRL Disclosure for Cross-Signed CA in CCADBreported in 1 day
2026-09-26closed2026-10-21NAVER CloudMissing CRL disclosure for two subordinate CAs in CCADBreported in 1 day
2026-09-25OPENNetlockCertificate Problem Report [CRL RFC 5280 S5.2.3]reported same day
2026-09-25OPENActalisIncorrect Revocation dates in CRL entriesreported in 2 days
2026-09-25closed2026-10-28KIRSZAFIR ROOT CA3 TLS CRL nextUpdate exceeds 12 monthsreported in 2 days
2026-09-25OPENTeliaCRL signature algorithm property non-conformance for EC issuer keyreported in 2 days
2026-09-24OPENNetlockCertificate Problem Report [CRL URL not disclosed in CCADB]reported in 1 day
2026-09-24OPENNetlockCertificate Problem Report [CRL BR S7.2.2]reported in 1 day
2026-09-24closed2026-10-02Amazon Trust ServicesCP/CPS for externally operated subordinate CAs not updated in CCADB within 14 daysreported in 3 days
2026-09-24OPENAsseco (Certum)Incorrect ECDSA-SHA384 AlgorithmIdentifier Encoding in CRLsreported in 1 day
2026-09-24OPENAsseco (Certum)CRL URLs in issued certificates not disclosed in CCADBreported in 1 day
2026-09-23closed2026-11-04SSL.comFailure to Post all Root and Intermediate CA certificates in Repository identified in CP/CPSreported in 56 days
2026-09-23OPENLet's EncryptRoot CRLs Missing Reason Codereported same day
2026-09-22closed2026-10-21DigiCert EV JOI match with organizationIdentiferreported in 2 days
2026-09-22OPENSwissSignBackdating of 48+hreported in 2 days
2026-09-19closed2026-11-04TunTrustCP/CPS markdown version missing root program attestationreported in 3 days
2026-09-18OPENDigiCertRevocation of SHA1 Issuing CAsreported in 3 days
2026-09-18OPENeMudhraInCommon IGTF SSL CPS missing conformance statement for Baseline Requirementsreported in 2 days
2026-09-18OPENeMudhraInCommon RSA IGTF Server CA 4 — certificates issued with key sizes not permitted by CPSreported in 2 days
2026-09-18closed2026-10-21SectigoSubmitted CPR not replied to within 24 hoursreported in 2 days
2026-09-18OPENSHECACP/CPS lacks explicit adherence statementreported in 2 days
2026-09-17OPENFNMTDelayed Revocation of SHA-1 Signed Subordinate CA Certificatereported in 2 days
2026-09-17OPENDigiCertExpired CRLreported in 2 days
2026-09-16OPENGoDaddyDelayed Revocation of SHA-1 Signed Subordinate CA Certificatesreported same day
2026-09-16closed2026-10-28SectigoViolation of TLS BR 7.1.3.2.2 in OCSP responsesreported same day
2026-09-16closed2026-11-03FirmaprofesionalDelayed revocation of SHA-1-signed AC Firmaprofesional - CA1reported in 1 day
2026-09-14closed2026-10-28FirmaprofesionalDelayed preliminary CPR response due to incomplete mailbox monitoring coveragereported same day
2026-09-14closed2026-10-28FirmaprofesionalOCSP signature verification errors for Secure Web 2024 certificatesreported same day
2026-09-11OPENSSL.comMPIC not performed for specific DCV pathreported in 2 days
2026-09-11closed2026-10-15Asseco (Certum)EV TLS Certificate Issued with Branch Name as Subject Organization Namereported same day
2026-09-10OPENDigiCertOCSP returns unauthorized for an issued TLS Certificatereported in 1 day
2026-09-05OPENSectigoCP/CPS language involving extendedKeyUsage found to be subject to multiple interpretationsreported in 2 days
2026-09-03closed2026-10-10FirmaprofesionalCP/CPS missing Chrome Root Program and CCADB policy attestationreported in 2 days
2026-09-01closed2026-10-02SECOMFive Subordinate CA Certificates Issued Without Apple Prior Approval for Cybertrust Japan (CTJ)reported in 1 day
2026-09-01OPENChunghwa TelecomDelay of 2025 WebTrust for CA Audit Reports seals for ePKI & HiPKIreported same day
2026-08-27closed2026-09-23IdenTrust2026 Audit Report Findingreported in 2 days
2026-08-27OPENActalisIncorrect CRL Distribution Point in TLS Server Certificatesreported in 1 day
2026-08-27closed2026-10-02CFCACross-signed certificate missing the Extended Key Usage (EKU) extensionreported in 2 days
2026-08-26closed2026-10-07eMudhraTest Website TLS Certificates Issued Against CP/CPS.reported same day
2026-08-26OPENMicrosecInsufficent support for "unspecified (0)" revocation reasonreported in 1 day
2026-08-25OPENGoDaddyCCADB Missing Partitioned CRL URL Disclosurereported in 1 day
2026-08-25closed2026-09-22Cybertrust JapanInaccurate CP/CPS description regarding the basicConstraints extension of OCSP responder certificates by Cybertrust Japan (CTJ)reported in 1 day
2026-08-24closed2026-11-04SECOMMissing Prior Notification and Approval for a Cross-Certificate Extending Trust to Externally-Operated JPRS CAsreported same day
2026-08-23OPENGlobalSignStateOrProvince and LocalityName value inconsistencyreported in 3 days
2026-08-21OPENSSL.comInvalid combinations of countryName, stateOrProvinceName, and localityName attributesreported in 2 days
2026-08-21closed2026-10-21IdenTrustExpired certificates for "Revoked" test websitesreported in 1 day
2026-08-16closed2026-09-22Amazon Trust ServicesCP/CPS missing explicit adherence to latest version of policiesreported in 2 days
2026-08-15OPENNetlockFailure to file a preliminary incident report within 72 hours (OCSP responder incident, Bug 2051459)reported in 40 days
2026-08-10OPENLet's EncryptCPS missing root program attestationreported same day
2026-08-10closed2026-10-02SectigojurisdictionCountry versus organizationIdentifier mismatch in QWACreported in 3 days
2026-08-10closed2026-09-17DigiCertjurisdictionCountry in EV certificatereported in 3 days
2026-08-08closed2026-09-11CertainlyTest Website Certificate Renewal Failure Following Production Deployment Driftreported in 3 days
2026-08-07OPENACCVIssuance of Server TLS Certificates with CP/CPS Discrepanciesreported in 3 days
2026-08-06closed2026-10-02Asseco (Certum)Incorrect Country in certificatereported in 1 day
2026-08-05closed2026-08-25BJCADelayed publication of Full Incident Report for Bug 2056489reported same day
2026-08-05closed2026-08-25BJCAFailure to Respond to a Certificate Problem Report Within 24 Hoursreported same day
2026-08-04closed2026-10-28ActalisIssuance of Server TLS Certificates with id-kp-clientAuth against CPSreported in 3 days
2026-08-03closed2026-09-28iTrusChinaInconsistent EKUs in CP/CPS and Mis-issuance of TLS Certificates with clientAuth against CP/CPSreported in 1 day
2026-07-31closed2026-09-14Asseco (Certum)Delayed publication of Full Incident Report for Bug 2055775reported same day
2026-07-29closed2026-09-24CFCADelayed response to CPR related with bug 2058918reported in 1 day
2026-07-29OPENCFCAIncorrect countryName values in OV subscriber certificatesreported in 2 days
2026-07-28closed2026-09-02GlobalSignSubCA created with incorrect CPS Policy OIDreported same day
2026-07-28closed2026-08-29DigiCertBlank SubCA Owner field in CCADB for cross-certificatereported in 3 days
2026-07-27closed2026-10-28Google Trust ServicesCPS Missing root program attestationreported in 1 day
2026-07-26closed2026-11-03SSL.comFailure to respond to Certificate Problem Report within 24 hoursreported in 2 days
2026-07-26OPENSSL.comInvalid Subject stateOrProvince Valuesreported in 2 days
2026-07-24closed2026-09-14eMudhraInvalid Subject Locality/State Valuesreported in 2 days
2026-07-24closed2026-10-02SwissSignInvalid Entry in State fieldreported in 2 days
2026-07-24closed2026-10-07SHECAFailed to provide a preliminary incident report within 72 hoursreported same day
2026-07-24closed2026-10-02SHECADisclosure alerts indicating audit information missing for 2 Sub-CAsreported in 10 days
2026-07-23closed2026-09-14GlobalSignUnicode replacement character issue in Subjectreported in 1 day
2026-07-22OPENFNMTIssuance of intermediates after 2019-01-01 that do not comply with Mozilla Policyreported in 2 days
2026-07-22closed2026-10-05Actalisfailure to timely update CP/CPS for AgID SubCAsreported same day
2026-07-21closed2026-08-31HARICAIssuance of Server TLS Certificates without AIA OCSP URI against CP/CPSreported in 1 day
2026-07-21closed2026-08-21BJCAIncident Report - TLS Certificates Issued with RSA Public Exponent 3reported in 1 day
2026-07-19closed2026-09-14DisigCP/CPS misstatement regarding Key Usage criticality for TLS certificatesreported in 1 day
2026-07-17closed2026-09-14Asseco (Certum)Incomplete CRL Disclosure in CCADBreported in 2 days
2026-07-16OPENHARICAIssuance of Server TLS Certificates with id-kp-clientAuth KeyPurposeID against CP/CPSreported in 1 day
2026-07-16closed2026-08-17DigiCertDelayed response to problem report related to Bug 2055539reported in 2 days
2026-07-16closed2026-08-11DigiCertDelayed availability of OCSP responsesreported in 2 days
2026-07-16closed2026-09-10FirmaprofesionalDelayed publication of 2026 Audit Attestation Lettersreported in 1 day
2026-07-15closed2026-10-13D-TrustIncomplete Disclosure of CRL URLsreported in 2 days
2026-07-15closed2026-08-21Chunghwa TelecomIncomplete disclosure of CRL URLs in CCADBreported in 2 days
2026-07-14closed2026-08-17DigiCertIncomplete disclosure of CRL URLs in CCADBreported same day
2026-07-14closed2026-07-30AtosIncorrect CRL URL in CCADBreported in 1 day
2026-07-13closed2026-08-17CFCADelayed response to CPR-related email related with bug 2049179reported in 7 days
2026-07-13closed2026-09-01FirmaprofesionalChrome Root Program Policy - Incorrect CCADB hierarchy associationsreported in 3 days
2026-07-13closed2026-11-03FirmaprofesionalChrome Root Progam Policy - Dedicated TLS hierarchy / EKU requirementsreported in 3 days
2026-07-07closed2026-08-18TunTrustOCSP responder "Unknown" of one Pre-certificatereported in 2 days
2026-07-03OPENNetlockFailure to Respond to a Certificate Problem Report Within 24 Hoursreported in 5 days
2026-07-03closed2026-08-08CertainlyExpired certificates on "Valid" and "Revoked" test websitesreported in 2 days
2026-07-02closed2026-08-17AppleAudit Documents missing 2 Sub-CAsreported in 2 days
2026-07-02closed2026-09-05CertainlyMissing audit log entries for certificates issued during capacity testingreported in 3 days
2026-06-30OPENNetlockOCSP Service Returning Error for Issued Certificatereported in 14 days
2026-06-29closed2026-08-08ANF ACDelayed Reporting of 2026 Audit Findingsreported same day
2026-06-25closed2026-08-06ANF ACIncident Report - OCSP "unknown" response for CT precertificatereported in 1 day
2026-06-22closed2026-07-27Government of KoreaIntermittent overseas accessibility of GSSL CRL/OCSP servicesreported in 12 days
2026-06-21closed2026-08-04CFCAOCSP Service return unauthorized responsesreported in 2 days
2026-06-19closed2026-07-30eMudhraOCSP Responder Returned "Unauthorized" for Some Pecertificatesreported same day
2026-06-18closed2026-08-04Kamu SMIncorrect CRL Served at SSL CRL Distribution Pointreported same day
2026-06-18closed2026-08-04IdenTrustEnd Entity TLS certificate mis-issuance against CP/CPS (IdenTrust certificate policy OIDs)reported in 2 days
2026-06-17closed2026-08-08SectigoDelay in some OCSP response signing due to application restart loopreported same day
2026-06-16closed2026-08-04KIROCSP responder does not return status for precertificatereported in 3 days
2026-06-16closed2026-07-21certSIGNincorrect URL in CCADBreported in 6 days
2026-06-16closed2026-07-09CertignaPre-certificates not recognised by the OCSP responderreported same day
2026-06-15closed2026-07-27ANF AC2026 Audit Report Finding 3 out of 3reported in 77 days
2026-06-15closed2026-08-08ANF AC2026 Audit Report Finding 2 out of 3reported in 77 days
2026-06-15closed2026-07-27ANF AC2026 Audit Report Finding 1 out of 3reported in 115 days
2026-06-09closed2026-07-09certSIGNInconsistent revocation status (CRL "revoked" vs OCSP "good") for intermediate CA "certSIGN Web CA"reported same day
2026-06-03closed2026-10-10Let's EncryptCRLs Temporarily Missing Revoked Serialsreported same day
2026-06-01closed2026-07-02Asseco (Certum)Cross-Certificates subject encoding discrepancyreported same day
2026-05-30closed2026-09-14eMudhrawww Subdomain Inclusion in Certificate SAN via ACME Issuance Workflowreported same day
2026-05-28closed2026-06-16CertignaDelay in reporting an audit findingreported in 1 day
2026-05-22closed2026-08-13OATIAIA CA Issuer field pointing to PEM encoded certreported in 22 days
2026-05-21closed2026-06-02CertignaFinding #1 ETSI Audit – Missing system configuration information in the CP/CPSreported in 83 days
2026-05-08OPENLet's EncryptGen Y Cross-Certified Subordinate CAs missing serverAuth EKUreported same day
2026-04-23closed2026-06-01GlobalSignCRL Distribution Point URLs incomplete for Cross-Certified Root CAs in CCADB recordsreported in 3 days
2026-04-22closed2026-05-13MicrosoftFailure to Update Full Incident Report within 14 days of discovering new root cause
2026-04-20closed2026-06-25CFCACRL signatureAlgorithm Missing NULL Parameter (RFC 4055 Section 5)reported in 13 days
2026-04-17closed2026-04-27NetlockTransition Plan for Mozilla Root Store Policy 7.5 by Deadlinereported in 1 day
2026-04-16closed2026-05-29Google Trust ServicesShort OCSP outagereported in 1 day
2026-04-16closed2026-07-30OATIMisissuance detected by PKIMetalreported same day
2026-04-16closed2026-08-09DVVMisissuance detected by PKIMetalreported in 69 days
2026-04-16closed2026-08-09SolutiMisissuance detected by PKIMetal
2026-04-16closed2026-05-13CertisignMisissuance detected by PKIMetal
2026-04-16closed2026-08-09Government of KoreaMisissuance detected by PKIMetalreported same day
2026-04-16closed2026-08-08IDRBTMisissuance detected by PKIMetal
2026-04-16closed2026-08-09VisaMisissuance detected by PKIMetalreported same day
2026-04-15closed2026-07-06Hongkong PostCertificates with invalid embedded SCT signaturereported in 3 days
2026-04-13closed2026-06-16CFCAOCSP Responder Certificate Profile Deviations and OCSP Service Issuesreported in 6 days
2026-04-12closed2026-05-29Google Trust ServicesIncomplete CRL Distribution Point URLs in CCADB for GTS Rootsreported in 2 days
2026-04-11closed2026-06-06SectigoPartial OCSP response publication delay for newly issued certificatesreported in 1 day
2026-04-06closed2026-05-22HARICAIncorrect Open MPIC Lambda implementation by EJBCA ACME Servicereported same day
2026-04-03closed2026-05-28SSL.comIncorrect Open MPIC Lambda implementation by EJBCA ACME Servicereported in 1 day
2026-04-02OPEND-TrustMissing Pre-Signing Linting for TLS Issuancereported same day
2026-03-26closed2026-05-11SiemensOutdated CP/CPS records disclosed in CCADBreported in 2 days
2026-03-26closed2026-04-22Microsoft Failure to report Bugzilla 2026452 within 72 hrsreported in 4 days
2026-03-26closed2026-04-22MicrosoftFailure to publish Full Incident Report for Bugzilla 2021175 within 14 daysreported in 7 days
2026-03-25closed2026-05-18IdenTrustRoot CrossSign, of dedicated Roots, missing EKUreported in 1 day
2026-03-24closed2026-05-18IdenTrustFull Incident Report for bug 2016585 was not published within 14 days of discovering the issuereported in 2 days
2026-03-24closed2026-05-18IdenTrustFull Incident Report for bug 2014610 was not published within 14 days of discovering the issuereported in 2 days
2026-03-24closed2026-05-18IdenTrustFull Incident Report for Bug 2014609 was not published within 14 days of discovering the issuereported in 2 days
2026-03-23closed2026-05-18IdenTrustDelay in updating a Bug 2016585 - Action itemreported in 1 day
2026-03-23closed2026-05-18IdenTrustDelay in updating a Bug 2016585 - Next updatereported in 1 day
2026-03-23closed2026-05-18IdenTrustDelay in updating a Bugzilla ticket Bug 2014610 - Next updatereported in 1 day
2026-03-23closed2026-05-18IdenTrustDelay in updating a Bug 2014609 - Next updatereported in 1 day
2026-03-23closed2026-04-23FirmaprofesionalDelayed weekly updates and responses on open incident reportsreported in 1 day
2026-03-23closed2026-04-15FirmaprofesionalDelayed initial incident reporting for Bug 2016475 (72-hour preliminary and 14-day full report timing)reported same day
2026-03-23closed2026-05-26certSIGNdelay in updating a Bugzilla ticketreported in 1 day
2026-03-23closed2026-04-28SHECAFailure to keep weekly updates under bugsreported in 1 day
2026-03-23closed2026-05-01iTrusChinaFailure to Provide Regular Incident Updatereported same day
2026-03-23closed2026-04-24Chunghwa TelecomTest Website certificate not revokedreported in 2 days
2026-03-22closed2026-04-27SHECATest Website certificate expiredreported same day
2026-03-15closed2026-06-01D-TrustTLS Precertificates Exceeding the Maximum Validity Period Allowed by the TLS Baseline Requirementsreported same day
2026-03-06closed2026-05-28NetlockUnavailability of the document repositoryreported same day
2026-03-05closed2026-04-17PostSignumLength Subject organizationNamereported in 15 days
2026-03-05closed2026-04-03Microsoft Failure to update action item status within 3 daysreported in 1 day
2026-03-04closed2026-04-11iTrusChinaFailure to Respond to Feb 2026 Chrome Root Program Surveyreported in 1 day
2026-02-27closed2026-04-08SectigoPackage patching gap within Certificate Systemsreported in 3 days
2026-02-19closed2026-06-29HARICAIncorrect nCAId in PSD2 QCStatement for QWACsreported in 1 day
2026-02-19closed2026-04-30Cybertrust JapanRepository service disruption affecting subordinate CAs (CTJ)reported in 2 days
2026-02-18closed2026-04-30Google Trust ServicesOutdated BR version in some validation recordsreported in 1 day
2026-02-16closed2026-04-15DigiCertCAA processing during network disruptionreported in 3 days
2026-02-13closed2026-03-17PostSignumMis-issued certificatereported in 3 days
2026-02-13closed2026-03-30certSIGNcertificates with delayed SCT signaturereported in 1 day
2026-02-12closed2026-06-15IdenTrustTest Certificates from cross-signed roots not disclosed in CT Logsreported in 2 days
2026-02-12closed2026-05-15FirmaprofesionalDelayed revocation disclosure of TLS Subordinate CA certificate Secure Web 2024 in CCADBreported in 8 days
2026-02-11closed2026-04-17IdenTrustGap between audit periodsreported in 2 days
2026-02-11closed2026-03-30FirmaprofesionalDelayed preliminary response under BR 4.9.5 (Bug #2009941)reported in 30 days
2026-02-09closed2026-05-18Swiss BIT (FOITT)Missing Contact Information in CCADB
2026-02-09closed2026-05-13NISZMissing Contact Information in CCADB
2026-02-09closed2026-05-15SDAIAMissing Contact Information in CCADBreported same day
2026-02-09closed2026-05-18EchoworxMissing Contact Information in CCADB
2026-02-09closed2026-05-18CerticamaraMissing Contact Information in CCADB
2026-02-09closed2026-04-13CarillonMissing Contact Information in CCADBreported in 37 days
2026-02-09closed2026-05-18Byte ComputerMissing Contact Information in CCADB
2026-02-09closed2026-05-13ANCERTMissing Contact Information in CCADB
2026-02-09closed2026-04-17SHECACRL of root CA not published within 24 hoursreported in 1 day
2026-02-06closed2026-03-23DigiCertSubject Serial Numbers for Non-Commercial Entitiesreported in 1 day
2026-02-05closed2026-03-02FNMTDelayed response to CPR sender related bug 2012326reported in 1 day
2026-02-05closed2026-04-11IdenTrustRoot OCSP Signer certificate mis-issuancereported in 3 days
2026-02-05closed2026-04-11IdenTrustCross-signed root certificate mis-issuancereported in 3 days
2026-02-04closed2026-04-23IdenTrustUnauthorized OCSP responses for cross-signed rootsreported in 2 days
2026-02-02closed2026-05-01iTrusChinaFinding in Routine WebTrust Audit - Domain validation records without the TLS BR versionreported in 3 days
2026-01-30closed2026-02-27Microsec"DV valid" test website certificate issued under incorrect rootreported in 2 days
2026-01-29closed2026-04-17Netlockdid not file a preliminary incident report or respond to a third-party report within the 72-hour timeframereported in 14 days
2026-01-29closed2026-05-26NetlockMissing Related Incidents section in the bug reportreported in 17 days
2026-01-27closed2026-02-19SecureTrustCP/CPS and SecureTrust Root transition intermediate timing issuereported in 4 days
2026-01-26closed2026-04-19D-TrustCRL HTTP Media Typereported in 3 days
2026-01-25closed2026-02-27FNMTIssuance of certificate using keys previously reported as compromisedreported in 2 days
2026-01-24closed2026-03-08Chunghwa TelecomIssuance of certificate using keys previously reported as compromisedreported in 1 day
2026-01-23closed2026-03-08Actalis Issuance of certificate using keys previously reported as compromisedreported same day
2026-01-22closed2026-03-17TrustAsiaSSL DV Mis-issuance against CP/CPS (IPAddress)reported same day
2026-01-21closed2026-03-17TrustAsiaACME Authorization Reuse Non-Compliancereported same day
2026-01-20OPEND-TrustDelayed publication of audit attestation letters in the CCADBreported in 7 days
2026-01-19closed2026-06-23Netlockunspecifed revocation code (0) in CRLreported in 7 days
2026-01-19closed2026-03-17DFN-PKICRL of “DFN-Verein Certification Authority 2“ contains empty revoked certificate listreported in 3 days
2026-01-16closed2026-03-05SectigoInaccuracy of CCADB-Disclosed URL for eIDAS CP/CPSreported in 1 day
2026-01-15closed2026-02-27D-TrustCRLs of CAs issuing CA certificates exceed the maximum validity periodreported in 1 day
2026-01-15closed2026-02-18CFCAreporting delayed when handling incident bug #2006333reported in 3 days
2026-01-13closed2026-04-06FirmaprofesionalMisissuance of TLS Subordinate CA "AC Firmaprofesional - Secure Web 2024"reported in 2 days
2026-01-10closed2026-02-11Microsoft Improper Disclosure of CRLs – Protocol Schemereported in 4 days
2026-01-10closed2026-02-09Microsoft Improper Disclosure of CRLs – Does Not Match CA Subjectreported in 4 days
2026-01-10closed2026-02-17Microsoft Improper Disclosure of CRLs – IDP – New CAsreported in 4 days
2026-01-10closed2026-02-11MicrosoftFailure to report within 72 hrs - Sample Site Certs Expiredreported in 1 day
2026-01-10closed2026-02-17Microsoft Improper Disclosure of CRLs – IDP – Existing CAsreported in 3 days
2026-01-09closed2026-03-08Amazon Trust ServicesAdditional CRL Characteristics Desired in CP/CPSreported in 2 days
2026-01-09closed2026-02-17DigiCertSeveral non-functioning AIA URLsreported in 2 days
2026-01-08closed2026-04-19D-TrustExpired certificate provided on the CA TLS test website for demonstration of valid certificatesreported in 2 days
2026-01-08closed2026-02-18CFCAreporting delayed when handling incident bug #2005399reported in 3 days
2026-01-07closed2026-02-19Chunghwa TelecomDelayed disclosure to Bug 2008803 GTLSCA Audit Incident Report #4 - Missing evaluation for third partiesreported in 1 day
2026-01-07closed2026-02-19Chunghwa TelecomDelayed disclosure to Bug 2008799 GTLSCA Audit Incident Report #3 - Missing vulnerability scanreported in 1 day
2026-01-07closed2026-02-19Chunghwa TelecomDelayed disclosure to Bug 2008788 GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR versionreported in 1 day
2026-01-07closed2026-02-19Chunghwa TelecomDelayed disclosure to Bug 2008782 GTLSCA Audit Incident Report #1 - mass certificate revocation planreported in 1 day
2026-01-07closed2026-01-28DisigDelayed Full Incident Reportreported in 1 day
2026-01-06closed2026-02-17Microsoft Sample Site Certificates expiredreported in 8 days
2026-01-06closed2026-02-12Chunghwa TelecomFindings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #4 - Missing evaluation for third partiesreported in 49 days
2026-01-06closed2026-02-19Chunghwa TelecomFindings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #3 - Missing vulnerability scanreported in 49 days
2026-01-06closed2026-02-11Chunghwa TelecomFindings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR versionreported in 49 days
2026-01-06closed2026-02-18Chunghwa TelecomFindings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #1 - mass certificate revocation planreported in 49 days
2025-12-31closed2026-02-19Chunghwa TelecomDelayed audit disclosure for GTLSCAreported same day
2025-12-29closed2026-04-20NetlockFull Incident Report was not published within 14 days of notificationreported in 1 day
2025-12-21closed2026-02-23eMudhraCRL URL Mismatch Between CCADB Disclosure and Issued Certificatesreported in 3 days
2025-12-20closed2026-01-12CertignaCRL URL Disclosurereported in 2 days
2025-12-20closed2026-03-02Microsoft Improper Disclosure of CRLreported in 2 days
2025-12-20closed2026-02-17DigiCertSome certificates issued with CRLDPs that don’t exactly match CCADB disclosuresreported in 2 days
2025-12-20closed2026-04-17GoDaddyPartitioned CRL files missing Issuing Distribution Pointreported in 1 day
2025-12-20OPENGoDaddyCRL Disclosure in CCADB Mismatch with Issued Certificatesreported in 1 day
2025-12-19closed2026-02-11DisigCertificates with invalid embedded SCT signaturereported same day
2025-12-19closed2026-09-03D-TrustCRL URL Disclosurereported in 1 day
2025-12-19closed2026-03-30Asseco (Certum)CRL URLs disclosed in CCADB do not exactly match the CRL URLs in certificatesreported same day
2025-12-19closed2026-02-12GlobalSignmisalignment of CRL URL in CCADB with issued certificatesreported same day
2025-12-19closed2026-02-17SHECAsubordinate certificates have not published the complete CRL address in CCADBreported in 1 day
2025-12-19closed2026-01-26TrustAsiaCRL disclosure address incorrectly using HTTPS scheme in CCADBreported in 1 day
2025-12-19closed2026-03-30Cybertrust JapanNon conformant SCT Encoding Due to SCT Modification by Cybertrust Japan (CTJ)reported in 15 days
2025-12-19closed2026-01-20DisigMissing CA Disig R2I2 Certification Service Full CRL URLs in CCADBreported in 1 day
2025-12-17closed2026-02-11NAVER CloudEncoding non-conformity in SCT extensionsreported same day
2025-12-16closed2026-01-20IdenTrustCT Logging Mistakesreported in 1 day
2025-12-16closed2026-03-10CFCAEV Certificates misissued with incorrect businessCategoryreported in 11 days
2025-12-14closed2026-03-13MicrosecCT Logging mistakesreported in 2 days
2025-12-12closed2026-02-05Chunghwa TelecomFailure to respond to CPR within 24 hoursreported same day
2025-12-11closed2026-02-03Chunghwa TelecomCA Certificates Published in PEM formatreported in 1 day
2025-12-11closed2026-02-18CFCADV OCA caIssuers Returns PEM Encoded Certificate (RFC 5280 Section 4.2.2.1 Violation)reported in 5 days
2025-12-10closed2026-04-22BuypassFindings in 2025 ETSI Audit - Audit Incident Report #2 - Supply chain policyreported in 2 days
2025-12-10closed2026-04-22BuypassFindings in 2025 ETSI Audit - Audit Incident Report #1 - Compliance auditing on support processesreported in 2 days
2025-12-10closed2026-01-28SHECACA Certificate not published in DER Encoded Formatreported in 1 day
2025-12-09closed2026-02-11GoDaddyCA Certificates Published in PEM formatreported in 3 days
2025-12-08closed2026-01-15NAVER CloudCA Certificate not published in DER Encoded Formatreported same day
2025-12-08closed2026-01-05CertignaAIA CA issuer field pointing to PEM encoded certreported in 2 days
2025-12-08closed2026-02-27CertignaFailure to respond to CPR within 24 hoursreported in 2 days
2025-12-08OPENNetlock CA in AIA in PEM formatreported in 2 days
2025-12-08closed2026-01-15NAVER CloudFailure to respond to CPR within 24 hoursreported same day
2025-12-08closed2026-01-20Telekom SecurityRoot-CA certificates published in PEM encoded formatreported in 2 days
2025-12-08closed2026-02-12SECOMInvalid stateOrProvinceNamereported same day
2025-12-06closed2026-01-13TWCACA Certificate not published in DER Encoded Formatreported same day
2025-12-05closed2026-02-05IdenTrustCA Certificate not published in DER Encoded Formatreported in 2 days
2025-11-25closed2026-01-13GoDaddyMissing R1 Intermediate Full CRL URLs in CCADBreported same day
2025-11-20closed2026-01-05NetlockMissing CDP Disclosure in CCADBreported same day
2025-11-13closed2026-07-01MicrosoftOCSP Non-Compliancereported in 3 days
2025-11-10closed2025-12-24eMudhraDelayed Publication of Issuing CA Certificates in CCADBreported in 2 days
2025-10-28closed2025-12-11Izenpenot allowed Key Usage in ocsp responder certificatereported same day
2025-10-20closed2025-12-11SwissSignAttribute Change process did not revoke single-domain certificatesreported in 3 days
2025-10-15closed2025-12-11SectigoFailure to reply to Certificate Problem Reports within 24 hoursreported in 2 days
2025-10-08closed2026-04-28SHECATLS certificate key generation onlinereported in 1 day
2025-10-04closed2026-02-18SecureTrustUnplanned Access Eventreported in 487 days
2025-09-29closed2026-01-15IdenTrustTLS self audit testing below 3%reported in 20 days
2025-09-26closed2025-11-21IdenTrustICA with invalid CDPreported in 10 days
2025-09-26closed2025-11-07SectigoOCSP, caIssuers, and CRL endpoints unavailable for a single Subordinate CAreported in 1 day
2025-09-25closed2025-11-03Microsoftimproper disclosure of CRLreported same day
2025-09-13closed2025-10-22TunTrustIssue with Valid test Certificatereported in 2 days
2025-09-04closed2026-04-06FinaMis-issued certificatesreported in 1 day
2025-08-27closed2025-11-20IzenpeFailed to respond a Certificate Problem Report within 24 hours and create a preliminary report in 72 hoursreported in 50 days
2025-08-26closed2025-10-09SectigoOCSP and CRL traffic not being proxied for 3 Subordinate CAsreported same day
2025-08-19closed2025-09-15CertignaSubscriber certificate with EKU clientAuth onlyreported same day
2025-08-12closed2025-11-07Actalismissing CCADB disclosure for new SubCAreported in 1 day
2025-08-07closed2025-09-26TunTrustSSL OV mis-issuance against CP/CPS (Email attribute)reported in 1 day
2025-07-26closed2026-01-20Microsoft End Entity Certificate Mis-issuance against CPS (BasicConstraints)reported in 2 days
2025-07-25closed2025-10-22Google Trust ServicesMissing authorization audit log entry for certificate issuancereported same day
2025-07-25closed2025-08-30NetlockExpired Test Website Certificatereported in 1 day
2025-07-19closed2025-09-19SHECAThe stateOrProvinceName and streetAddress of the certificate DN item are issued incorrectlyreported in 1 day
2025-07-18closed2025-10-29DigiCertRe-use of WHOIS validation shortly after deadlinereported in 1 day
2025-07-14closed2025-09-15SectigoOV reuse data applied for wrong organizationreported same day
2025-07-11closed2025-08-21Telekom SecurityFailure to file a bug for two findings from the 2024 Auditreported in 1 day
2025-07-11closed2025-08-19D-TrustDefective certificate incident reporting formreported in 2 days
2025-07-08closed2025-11-20IzenpeIssuingDistributionPoint extension in CRLs not marked as Criticalreported in 7 days
2025-07-04closed2025-09-24Cybertrust JapanCybertrust Japan's CRL lacks the critical flag in the issuingDistributionPoint extensionreported in 3 days
2025-06-28closed2025-08-30MicrosoftPre-Sign Linting Validation did not occur in ICA creationreported in 2 days
2025-06-27closed2025-10-09DigiCertDCV logging issuereported in 1 day
2025-06-26closed2025-07-16ANF ACTest Certificates Non-Compliancereported same day
2025-06-26closed2025-08-30SHECANew CPS disclosure of CCADB exceeds the required 14-day deadlinereported in 1 day
2025-06-21closed2025-08-19eMudhraPolicy Document Inconsistencyreported in 2 days
2025-06-20closed2025-09-24Actalisincorrect CP/S Last Update date in CCADBreported in 2 days
2025-06-20closed2025-07-09ANF ACDelayed Disclosure of Updated Policy Documents in CCADBreported in 2 days
2025-06-19closed2025-07-02CertignaFinding #3 ETSI Audit – Event log protection beyond seven years shall be improvedreported in 83 days
2025-06-19closed2025-07-02CertignaFinding #2 ETSI Audit - Risks regarding the certification of device not describedreported in 83 days
2025-06-18closed2025-07-08A-TrustTLS non-compliance detected during linter implementationreported in 2 days
2025-06-18closed2025-07-30Let's EncryptDeployed Unreviewed Boulder Codereported in 2 days
2025-06-17closed2025-07-16SectigoLack of technical controls for multiparty control access to Secure Zonereported in 1 day
2025-06-14closed2025-07-16SectigoLack of documentation for vulnerability NVD rating adjustmentreported in 3 days
2025-06-06closed2025-07-08Microsoft Incorrect Revocation Reason Codereported same day
2025-06-05closed2025-07-16eMudhraInvalid CRL signaturesreported same day
2025-06-05closed2025-07-16eMudhraFailure to respond to a Problem Report within 24 hoursreported same day
2025-06-05closed2025-07-08ANF ACFinding #4 ETSI Audit - Missing one Revocation circumstance on CPSreported in 111 days
2025-06-05closed2025-07-08ANF ACFinding #2 ETSI Audit - Information security policy not updated on the websitereported in 84 days
2025-06-05closed2025-07-08ANF ACFinding #3 ETSI Audit - Improve documental explanation revocation request >24h on CPSreported in 84 days
2025-06-02closed2025-07-16ANF ACFinding #1 ETSI Audit - Missing log retention period in Terms and Conditions v1.9reported in 81 days
2025-05-29closed2025-07-22GoDaddyCertificates with invalid embedded SCT signaturesreported in 7 days
2025-05-28closed2025-07-16TeliaTLS incorrect AIA caIssuer URI and incorrect CDPreported same day
2025-05-28closed2025-08-11CertainlySample Websites Unavailablereported in 2 days
2025-05-23closed2025-07-01EntrustIncomplete privileged access removal within 24 hoursreported in 2 days
2025-05-22closed2025-07-01FNMTDelayed Disclosure of Updated Policy Documents in the CCADBreported in 3 days
2025-05-22closed2025-07-17KIRFailed to respond a Certificate Problem Report within 24 hoursreported in 10 days
2025-05-13closed2025-07-01KIRIntermediate CA - SZAFIR Trusted CA3 - revocation status not changed in CCADBreported in 4 days
2025-05-12closed2025-08-19SwissSignOCSP outagereported same day
2025-05-12closed2025-06-12certSIGNFindings in 2025 ETSI Audit - Audit Incident Report #5 – Conflicting info in CPSreported in 13 days
2025-05-12closed2025-06-12certSIGNFindings in 2025 ETSI Audit - Audit Incident Report #3 – Missing certSIGN OID on Terms and Conditionsreported in 13 days
2025-05-12closed2025-06-12certSIGNFindings in 2025 ETSI Audit - Audit Incident Report #1 – Improve clarity in CPSreported in 13 days
2025-05-09closed2025-07-01eMudhraDelayed Publication of Issuing CA Certificates In CCADBreported same day
2025-05-07closed2025-07-01SHECAOCSP service response errorreported same day
2025-05-02closed2025-06-10SecureTrustMissing CRL in CCADBreported same day
2025-05-01closed2025-11-20FNMTCP/CPS, Revocation Requests Mechanism, Certificate Problem Report, CRL and OCSP disruptionreported in 3 days
2025-04-30closed2025-06-12CertignaMultiple Reserved Certificate Policy Identifiers in CA certificatesreported in 2 days
2025-04-30closed2025-07-08HARICAOne of the two Certificate Problem Report email aliases not workingreported in 1 day
2025-04-29closed2025-07-24GoDaddyCA Certificates with HTTPS URL in AIA Fieldreported in 1 day
2025-04-26closed2025-06-20Microsoft Subscriber certificate change made that was not compliant with CPSreported in 1 day
2025-04-26closed2026-04-26Microsoft Policy document bugreported in 1 day
2025-04-25closed2025-07-28SSL.comExpired certificate for a “Valid” Test Websitereported in 1 day
2025-04-24closed2025-07-16NetlockCA/Browser Forum TLS BR Non-compliancereported in 3 days
2025-04-18closed2025-07-02SSL.comDCV bypass and issue fake certificates for any MX hostnamereported same day
2025-04-11closed2025-06-10Google Trust ServicesInconsistent MPCAA secondary perspective loggingreported in 1 day
2025-04-10closed2025-07-16CFCAFailed to respond a Certificate Problem Report within 24 hours which violates Section 4.9.5 of the TLS BRsreported in 16 days
2025-04-05closed2025-06-10Asseco (Certum)DNS service outagereported in 1 day
2025-04-02closed2025-05-22Telekom SecurityQCStatement with http link to PDSreported same day
2025-03-31closed2025-07-01DigiCertPersistent failure to answer questions in a timely mannerreported in 76 days
2025-03-31closed2025-06-10NetlockFailure to Provide Weekly Updatesreported same day
2025-03-28closed2025-08-11SSL.com"unknown" OCSP response for issued certificatesreported in 3 days
2025-03-27closed2025-05-22Chunghwa TelecomOV TLS Server certificate issuance by GTLSCA without proper validationreported in 1 day
2025-03-27closed2025-05-08EntrustCross-certified CA CP/CPS not updated in CCADBreported in 2 days
2025-03-23closed2025-04-11CFCAFailed to follow Report lifecycle rule to respond within 7 daysreported in 1 day
2025-03-21closed2025-06-10Let's EncryptFailure to Document Analysis of Detected Vulnerabilitiesreported same day
2025-03-20closed2025-05-16ApplePublic Key Reusereported in 3 days
2025-03-18closed2025-04-09Let's EncryptEarly CRL Removal Incidentreported same day
2025-03-17closed2025-05-16SectigoTemporary failure to publish OCSP responses for newly issued certificatesreported in 2 days
2025-03-08closed2025-05-16CommScopeValidation issue in SCT extensions in certificatesreported in 4 days
2025-03-03closed2025-05-08Chunghwa TelecomFailure to check restrictive CAA record during Migrationreported in 2 days
2025-02-21closed2025-05-08GoDaddyDelayed CRL File Updatesreported in 2 days
2025-02-17closed2025-07-01IzenpeOutdated CPS for Izenpe Rootreported in 3 days
2025-02-14closed2025-03-14Google Trust ServicesSelf-audit tooling MPIC perspective verification inconsistencyreported in 2 days
2025-02-10closed2025-02-28FNMTIncorrect publication of information for Test Website - Validreported in 3 days
2025-02-09closed2025-04-11Chunghwa Telecomoutdated and stale policy documents disclosed to the CCADBreported in 11 days
2025-02-08closed2025-05-16SectigoIntermittent OCSP unauthorized responses for certificates older than 15 minutesreported same day
2025-02-08closed2025-04-09SHECADV SSL certificate format is abnormalreported in 1 day
2025-02-06closed2025-03-14Chunghwa TelecomDelayed to Submit Annual CCADB Self-Assessment 2024 by GTLSCA.reported in 18 days
2025-02-06closed2025-04-09Chunghwa TelecomFailure to Submit Annual CCADB Self-Assessment 2023 by GTLSCA.reported in 317 days
2025-02-04closed2025-04-18IzenpeIncorrect Unicode characters in Subjectreported same day
2025-02-03closed2025-06-02DigiCertOutdated CPS for 13 Roots in CCADBreported in 24 days
2025-02-03closed2025-05-16CommScopeService outagereported in 3 days
2025-01-31closed2025-02-28SectigoLate receipt and disclosure to CCADB of ETSI audit lettersreported in 1 day
2025-01-28closed2025-04-03MicrosoftSubject Key Identifiers in Some Subscriber Certificates Do Not Comply with RFC 5280reported in 1 day
2025-01-24closed2025-05-25HARICATLS Server certificate issuance without proper validationreported in 1 day
2025-01-24closed2025-02-19Entrustdelayed revocationreported same day
2025-01-23closed2025-05-08ActalisCRL with duplicate serial number in revokedCertificatesreported in 1 day
2025-01-21closed2025-02-12GlobalSignDelayed revocationreported same day
2025-01-21closed2025-05-08GoDaddyDelayed revocationreported in 4 days
2025-01-20closed2025-02-14SectigoLate disclosure of updated SSL.com CP/CPS to CCADBreported in 3 days
2025-01-10closed2025-04-09eMudhraIssue with revocation as part of automated reissuancereported in 3 days
2025-01-10closed2025-06-20TeliaTLS OV certificate with subject countryName and localityName mismatchreported in 1 day
2025-01-03closed2025-03-21D-TrustQCStatement with http link of PKI Disclosure Statementsreported in 3 days
2024-12-18closed2025-02-28SSL.comFailure to process CAA records from one SubCAreported in 1 day
2024-12-18closed2025-06-10NetlockCRL not published in DER Encoded Formatreported in 1 day
2024-12-13closed2025-02-28DigiCertLate incident report for bug 1925106
2024-12-12closed2025-02-12DigiCertEncoded HTML entities in attribute valuesreported same day
2024-12-12closed2024-12-20TeliaFindings in 2024 Audit
2024-12-05closed2025-01-29Asseco (Certum)Failure to Update Policy Documents within 365 Daysreported in 2 days
2024-12-03closed2025-01-14GlobalSignOV TLS certificate with incorrect countryName value for organizationreported in 1 day
2024-11-30closed2025-02-14CertisignMis-issued certificate
2024-11-25closed2025-03-21IdenTrustIncorrect response for OCSP validationreported in 2 days
2024-11-23closed2025-02-12DigiCertSome CRLs were not updated for a few daysreported in 2 days
2024-11-22closed2025-04-07SSL.comCAA Empty set handling results in Wildcard issuancereported in 7 days
2024-11-18closed2025-02-12EntrustCRL missing revocation reasonCodereported in 4 days
2024-11-16closed2025-04-09eMudhraKey Blocking Mechanism Fails to Validate Historical Public Key Reuse.reported in 3 days
2024-11-15closed2025-02-12SSL.comDelay in publishing OCSP responsesreported in 2 days
2024-11-15closed2025-01-06SECOMIssuance of TLS server certificates using keys previously compromisedreported in 2 days
2024-11-14closed2024-12-27Google Trust ServicesNew hire onboarding deviation from written procedurereported in 71 days
2024-11-12closed2025-02-12DigiCertDomain used for CRLs and OCSP has expiredreported same day
2024-11-08closed2025-02-19IdenTrustApproval of TLS certificate renewal without domain validationreported in 3 days
2024-10-29closed2024-12-02iTrusChinaCPR was not responded to within 24 hoursreported same day
2024-10-28closed2025-08-26SSL.comIssuance of certificates using keys previously reported as compromisedreported in 3 days
2024-10-28closed2025-01-29iTrusChinaIssuance of certificates using keys previously reported as compromisedreported in 2 days
2024-10-17closed2025-02-28FirmaprofesionalIncorrect publication of information for "Test Website - Revoked" URL in the CCADB.reported in 3 days
2024-10-17closed2025-01-14MicrosecExpired Certificates on test Pages for Revocationreported in 3 days
2024-10-16closed2025-07-22DigiCertIncorrect CP listed in CCADBreported in 1 day
2024-10-16closed2025-04-03GoDaddy Does not provide a method for domain owners to revoke their certificates
2024-10-14closed2025-01-31certSIGNMissing certificate from the list of bad order subject attributtesreported in 3 days
2024-10-14closed2025-02-14eMudhraFailure To Update CA Owner Information In CCADBreported in 7 days
2024-10-08closed2024-12-02iTrusChinalacking 2018 KGC and GAP period audit reportreported in 179 days
2024-10-05closed2025-02-12FNMTLDAP URI in CRL Distribution Points Extensionreported in 1 day
2024-09-28closed2025-02-19KIRIntermediate CA - SZAFIR Trusted CA4 - Certificate Policies extension - non-compliancereported in 3 days
2024-09-28closed2025-02-19KIRFailure to disclose intermediate certificate within 7 days in ccadbreported in 3 days
2024-09-27closed2024-11-06Let's EncryptNo Meaningful Subject Distinguished Namereported same day
2024-09-27closed2024-11-04SwissSignFindings in 2024 Audit
2024-09-26closed2025-02-19IzenpeDuplicate attribute in Subjectreported in 23 days
2024-09-17closed2024-10-23GlobalSignCaching headers inaccurate for subset of CRLsreported in 4 days
2024-09-16closed2024-11-04IdenTrustTLS Certificates with outdated certificate profilereported in 6 days
2024-09-12closed2024-10-07DigiCertFindings in 2024 ETSI Audit of QuoVadis Qualified Web ICA G2
2024-09-10closed2024-11-22GlobalSignIncorrect whois information for TLDreported in 1 day
2024-09-08closed2025-02-14eMudhraOCSP Responder Time Inconsistencyreported in 3 days
2024-09-06closed2024-12-05Chunghwa TelecomDelayed Annual Audit Report 2024
2024-09-05closed2025-04-18NetlockFindings in 2024 Audit
2024-09-03closed2024-11-13SwissSignLDAP URL still in CRL distribution point (CDP)reported same day
2024-09-03closed2025-04-09eMudhraDelayed Revocation of SSL/TLS Certificatesreported in 2 days
2024-09-03closed2025-02-12Chunghwa TelecomTLS Certificates Contains two LocalityName Values in SubjectDN by GTLSCAreported in 1 day
2024-08-30closed2024-09-26SectigoMissing data in cabfOrganizationIdentifierreported in 1 day
2024-08-26closed2025-01-08DigiCertUnclear Disclosure of CAA Issuer Domain Namesreported same day
2024-08-26closed2024-09-18Amazon Trust ServicesCRL not DER-encoded
2024-08-22closed2024-09-04eMudhraCA Certificates not published in DER Encoded Formatreported in 1 day
2024-08-22closed2025-02-04ActalisUse of CRLReason Code in Certificate Revocationreported in 1 day
2024-08-22closed2024-12-11Telekom SecurityCRL-Entries with wrong CRL Reason Codesreported in 1 day
2024-08-22closed2025-03-05SHECACRLReason code usage errorreported in 1 day
2024-08-15closed2024-09-13D-TrustCRL-Entries without required CRL Reason Codereported in 1 day
2024-08-08closed2024-09-26SectigoHTML encoded characters in subject attribute valuesreported in 2 days
2024-07-31closed2024-11-19Entrustroots distrusted by Mozilla
2024-07-30closed2024-10-07CommScopeCertificates not logged in CT logs as stated in CP/CPSreported in 4 days
2024-07-29closed2024-08-21SectigoMissing character in subject:organizationName attribute valuereported in 3 days
2024-07-29closed2025-02-19DigiCertRandom value in CNAME without underscore prefixreported in 2 days
2024-07-27closed2025-01-29DigiCertTypo in TLS Org Namereported in 2 days
2024-07-25closed2024-10-31GoDaddyEdge Case for Data Reuse Outside of Timeframesreported in 3 days
2024-07-22closed2024-09-04Asseco (Certum)CP/CPS, Revocation Requests Mechanism, Certificate Problem Report, CRL and OCSP disruptionreported in 1 day
2024-07-18closed2024-08-23SectigoTemporary unavailability for subset of CRLsreported in 2 days
2024-07-16closed2024-08-28NAVER CloudIncorrect keyUsage for ECC certificatereported same day
2024-07-16closed2024-08-28NAVER CloudCertificate issued with incorrect OCSP URI in AIAreported same day
2024-07-15closed2024-08-28iTrusChinaCRL Reason Codesreported same day
2024-07-15closed2024-08-28CertignaFindings in 2024 ETSI Audit – Audit Incident Report
2024-07-12closed2024-08-17DisigTwo certificates with same serial numberreported same day
2024-07-12closed2024-09-06NetlockCPS 1.5.2. problem and contact information updatereported in 14 days
2024-07-08closed2025-02-04ActalisCRL distribution point with ldap schemereported same day
2024-07-03closed2024-08-15MicrosoftVulnerability Management Exception Trackingreported in 5 days
2024-06-29closed2025-05-08NetlockCPR was not responded to in 24 hoursreported same day
2024-06-28closed2024-10-31GoDaddyIntermittent unauthorized OCSP response when certificate is freshly issuedreported in 1 day
2024-06-26closed2024-10-31GoDaddyCAA checks passed when records contained incorrect variants of godaddy.com or starfieldtech.comreported in 3 days
2024-06-26closed2024-10-31GoDaddyCAA checks did not properly handle issuewild tag allowing FQDN SANs to be added to wildcard certsreported in 3 days
2024-06-24closed2024-09-26CommScopeIncomplete Incident Reportreported same day
2024-06-23closed2024-06-30MicrosoftInvalid Email Address for CPRs
2024-06-21closed2025-07-01NetlockIntermediate CA Certificate not disclosed to CCADBreported in 3 days
2024-06-21closed2025-04-18Chunghwa Telecom“Test Website - Valid" URL disclosed to CCADB is expiredreported in 9 days
2024-06-20closed2024-07-31WISeKeyOCSP responding "Unauthorized" for a TLS certificatereported same day
2024-06-17closed2024-08-21SHECAThe certificate's cpsURI is emptyreported in 3 days
2024-06-15closed2024-08-21GoDaddyCPR was not responded to in 24 hours
2024-06-14closed2024-08-28SectigoQWAC certificates issued with incorrect subject:organizationIdentifier attribute valuereported in 1 day
2024-06-14closed2024-07-31Google Trust ServicesSXG certificates issued without correctly checking CAA restrictionsreported in 3 days
2024-06-14closed2024-08-21SHECAEV certificate subject RDN order is incorrectreported in 1 day
2024-06-13closed2024-07-11SectigoTrusted Role Access provided prior to completion of onboarding processreported in 1 day
2024-06-11closed2026-04-09GLOBALTRUST (e-commerce monitoring)roots distrusted by Mozilla
2024-06-10closed2024-07-28CommScopeCertificates were issued in which third-party web-based tools were used during validation.reported in 3 days
2024-06-04closed2024-08-28CertignaARL without reasoncode for recent revoked CA certificatesreported same day
2024-05-31closed2024-06-28CertainlyServing invalid or incomplete CRLsreported in 2 days
2024-05-29closed2024-09-13Chunghwa TelecomControversial Values within Extension (2.5.29.9, subjectDirectoryAttributes)reported in 6 days
2024-05-25closed2024-08-15EntrustDelayed reporting of Jurisdiction issue in some EV TLS & Code Signing certificatesreported in 13 days
2024-05-19closed2024-08-15EntrustJurisdiction issue in some EV TLS & Code Signing certificatesreported in 3 days
2024-05-17closed2024-08-23IdenTrustTLS ICA with User Notice in Policy Qualifierreported in 8 days
2024-05-17closed2024-06-14SectigoIncorrectly included registrationStateOrProvince in PSD-based cabfOrganizationIdentifier extensionreported in 2 days
2024-05-17closed2024-07-09GLOBALTRUST (e-commerce monitoring)failure to maintain links to historic CP/CPS versionsreported in 14 days
2024-05-17closed2024-07-24SECOMDifference in upper and lower case between CN field and SANreported in 8 days
2024-05-16closed2024-09-06certSIGNFindings in 2024 ETSI Audit - Audit Incident Report
2024-05-14closed2024-07-24SECOMCertificates Issued with lower case value in subject:countryNamereported in 5 days
2024-05-13closed2024-06-01DigiCertPreview certificate uploaded to CCADB instead of the actual certificatereported in 3 days
2024-05-10closed2024-11-06D-TrustIssuance of an EV certificate containing a mixup of the Subject's postalCode and localityNamereported in 1 day
2024-05-10closed2024-09-04TeliaCertificates Issued with lower case value in subject:countryNamereported in 1 day
2024-05-08closed2024-06-05SectigoIncorrect inclusion of DBA namereported in 5 days
2024-05-06closed2024-09-18TunTrustCRL and OCSP unavailablereported in 3 days
2024-05-03closed2024-08-23IdenTrustunintended creation of a Root CA certificatereported in 4 days
2024-05-01closed2024-07-03DigiCertIncorrect case in Business Categoryreported in 2 days
2024-04-29closed2025-01-22EntrustNot updating CPR Problem Reporting Mechanism fields in CCADBreported in 10 days
2024-04-29closed2024-07-03SwissSignMPKI step-up process sets wrong JoI Localityreported same day
2024-04-26closed2024-06-01D-TrustNotice to affected Subscriber and person filing CPR not sent within 24 hours
2024-04-25closed2024-07-09GLOBALTRUST (e-commerce monitoring)failure to follow incident report requirements
2024-04-15closed2024-05-02DigiCertGovernment Entity listed instead of registration numberreported in 2 days
2024-04-12closed2024-05-13SectigoEV Certificate issuance with incorrect subject:serialNumber attribute valuereported in 1 day
2024-04-12closed2024-08-07D-TrustIssuance of 15 certificates with incorrect subject attribute orderreported in 3 days
2024-04-11closed2024-05-05SectigoPremature disabling of CRL generation for an inactive CAreported in 1 day
2024-04-11closed2024-05-05EntrustDelayed incident report - CPS typographical (text placement) error
2024-04-11closed2024-08-15EntrustCPS typographical (text placement) errorreported in 16 days
2024-04-06closed2024-08-13EntrustFailed to provide a preliminary incident report according to TLS BR 4.9.5
2024-04-04closed2024-08-28MicrosecDisallowed subject attribute field in DV certificatereported in 1 day
2024-04-04closed2024-06-01DisigCertificates with incorrect Subject attribute orderreported same day
2024-04-04closed2024-08-28NetlockPolicy Qualifiers other than id-qt-cps is included in TLS certificatesreported in 1 day
2024-04-04closed2024-08-28ACCVCertificates issued with Policy qualifiers other than id-qt-cpsreported in 1 day
2024-04-03closed2024-09-04FirmaprofesionalPolicy Qualifiers other than id-qt-cps present for certificatereported in 1 day
2024-04-02closed2024-05-05EntrustCRL non-conformance with the TLS BRsreported same day
2024-04-01closed2025-04-03CFCAFailure to respond to a CPR in a complete and/or timely mannerreported in 13 days
2024-03-29closed2024-07-11EntrustEV Certificate missing Issuer’s EV Policy OIDreported in 1 day
2024-03-29closed2024-10-02Asseco (Certum)CRL non-conformance with the TLS BRsreported same day
2024-03-29closed2024-06-05SecureTrustDelayed preliminary report of CPR to affected Subscribers
2024-03-28closed2024-07-09GLOBALTRUST (e-commerce monitoring)CRLs with mismatched issuerreported same day
2024-03-27closed2024-07-11DisigTLS certificate with basicConstraints not marked as criticalreported in 1 day
2024-03-27closed2025-03-05GDCAIssuance of SSL/TLS certificates with Non-critical Basic Constraintsreported in 1 day
2024-03-27closed2024-06-05DigiCertFailure to include CPS URI in 1 certificatereported in 2 days
2024-03-22closed2024-09-06Chunghwa TelecomWrong Extended Key Usage setting by GTLSCAreported in 3 days
2024-03-22closed2024-08-28Hongkong PostTLS certificates with basicConstraints not marked as criticalreported in 1 day
2024-03-22closed2024-08-28MicrosecLate response to a CPRreported in 4 days
2024-03-21closed2024-04-17Let's EncryptkeyCompromise key blocking deviation from CP/CPSreported in 1 day
2024-03-21closed2024-07-11ACCVDelayed response to CPR
2024-03-21closed2024-08-28Hongkong PostDelayed response to CPRreported in 3 days
2024-03-20closed2024-06-01certSIGNDelayed response to CPRreported in 2 days
2024-03-20closed2024-06-05certSIGNCertificates with incorrect Subject attribute orderreported in 2 days
2024-03-20closed2024-06-28EntrustclientAuth TLS Certificates without serverAuth EKUreported same day
2024-03-20closed2024-08-28Hongkong PostTLS certificates with Certificate Policies extension that does not assert http schemereported in 2 days
2024-03-19closed2024-08-28MicrosecMisissuance an EV TLS certificate without CPSurireported in 1 day
2024-03-19closed2024-09-26CFCAcertificate basicConstraints extension not marked as criticalreported same day
2024-03-16closed2024-09-13EntrustCPR was not responded to in 24 hours
2024-03-13closed2024-07-03TWCATLS certificates with non-critical basicConstraintsreported same day
2024-03-11closed2024-09-13D-TrustLDAP-URL in Subscriber Certificate Authority Information Access fieldreported in 7 days
2024-03-09closed2024-07-11ACCVCertificates issued with cRLIssuer in CDP extensionreported in 5 days
2024-03-08closed2024-04-06MicrosoftCA Certificates not published in DER Encoded Formatreported in 28 days
2024-03-06closed2024-08-13EntrustEV TLS Certificate cPSuri missingreported in 2 days
2024-03-05closed2024-03-27IdenTrustTemporary Errors in Test Website Certificatesreported in 22 days
2024-03-05closed2024-06-05SecureTrustOV Precertificates with incorrect Subject RDN encoding orderreported in 1 day
2024-03-05closed2024-06-28ActalisCertificates issued with invalid RDN orderreported in 1 day
2024-03-05closed2024-07-09GLOBALTRUST (e-commerce monitoring)precertificate validity does not match leaf certificatereported in 34 days
2024-03-05closed2024-07-03TWCATLS EV certificates with invalid subject attribute orderreported in 1 day
2024-03-04closed2025-02-19IzenpeFailure to Submit Annual CCADB Self-Assessmentreported same day
2024-03-04closed2024-08-28CertignaTLS certificates with Basic constraint non-criticalreported same day
2024-02-29closed2024-05-05Google Trust ServicesIncorrect OCSP responses for new ICAs under testreported in 1 day
2024-02-27closed2024-08-28AGCENon-Compliant VPN Certificate Issuancereported in 21 days
2024-02-09closed2024-07-19EntrustOCSP response signed with SHA-1reported in 6 days
2024-02-09closed2024-03-29MicrosoftOCSP Responder does not know a Certificatereported in 1 day
2024-02-09closed2024-04-06D-Trust"unknown" OCSP response for issued certificatesreported in 1 day
2024-02-01closed2024-04-03SectigoFailure to invalidate Email DCV Random Values after 30 daysreported in 3 days
2024-02-01closed2024-03-08HARICAAnomaly in OCSP services after CA software upgradereported in 3 days
2024-01-31closed2024-03-27TeliaFindings in Audit 2023
2024-01-26closed2024-03-15IdenTrusttest certificates inadvertently published in production environmentreported in 4 days
2024-01-26closed2024-02-08SwissSignmodified fields were not saved into certificates and resulted in miss-issuancereported in 1 day
2024-01-25closed2024-04-17Google Trust ServicesFailure to properly validate IP addressreported in 1 day
2024-01-25closed2024-04-06IzenpeNot allowed Qualifier ID OID on Certificate Policies extensionreported same day
2024-01-22closed2024-08-28FNMTCertificates issued included Policy qualifiers other than id-qt-cpsreported same day
2024-01-22closed2024-05-05Telekom SecurityTLS certificates with basicConstraints not marked as criticalreported same day
2024-01-19closed2024-03-15BuypassFindings in 2023 audit
2024-01-11closed2024-03-27SwissSigndifference in upper and lower case between CN field and SANreported in 1 day
2023-12-29closed2024-01-24HARICAsubject:organizationIdentifier using VATEL as a prefix for tax identifierreported in 2 days
2023-12-29closed2024-08-07BuypassUsing an external DNS Resolver for DNS lookupsreported in 7 days
2023-12-15closed2024-01-24IdenTrustExpired CRL servedreported in 9 days
2023-12-15closed2024-01-24GlobalSignTLS OV Certificate containing unverified informationreported in 1 day
2023-12-08closed2024-02-02SectigoInadequate vulnerability scanning and patchingreported in 45 days
2023-12-01closed2024-04-24SSL.comFindings in 2023 audit
2023-11-28closed2024-01-24EntrustJurisdiction Locality Wrong in EV Certificatereported in 11 days
2023-11-24closed2024-02-14NAVER CloudDV Certificate issued with improperly validatedreported same day
2023-11-22closed2023-12-11SwissSignEV JurisdictionStateOrProvinceName - one certificate not selected for revocationreported in 1 day
2023-11-21closed2024-02-14MicrosecFindings in 2023 Auditreported in 70 days
2023-11-17closed2023-12-07DigiCertLate background refreshment checkreported in 7 days
2023-11-16closed2024-01-04Asseco (Certum) TLS EV certificates with incorrect Subject attribute orderreported same day
2023-11-10closed2024-05-10BuypassTLS certificates with incorrect Subject attribute orderreported same day
2023-11-04closed2024-01-10CFCACRL Errorreported in 9 days
2023-10-25closed2024-06-01D-TrustIssuance of 15 DV certificates containing ‘serialNumber’ field within subjectreported same day
2023-10-24closed2023-11-08SwissSignEV code in JurisdiktionStateOrProvinceNamereported in 1 day
2023-10-18closed2024-03-06CommScopeCertificate not revoked as it was supposed to bereported in 7 days
2023-10-18closed2023-11-29SHECAIssuance of test certificatesreported in 1 day
2023-10-16closed2024-01-26TeliaTLS certificates issued in violation of TLS BR v2.0.1reported same day
2023-10-13closed2024-01-10SecureTrustIncorrect OCSP Responsereported in 7 days
2023-09-29closed2023-11-22SHECACRLs unavailable, not downloading
2023-09-21closed2023-11-02IdenTrustExpired ICAs CRLsreported in 21 days
2023-09-15closed2023-10-12IdenTrustTemporarily Expired CRLsreported in 7 days
2023-09-09closed2023-09-22CommScopeEmpty SCT extensions in certificatesreported in 4 days
2023-08-30closed2023-09-29IdenTrustbasicConstraints not flagged "Critical" Per Certification Practices Statementreported in 2 days
2023-08-25closed2023-10-12GlobalSignEV TLS certificate with only metadata in JOI State fieldreported in 1 day
2023-08-11closed2023-11-02TWCACA certificate without EKUreported same day
2023-08-11closed2023-10-12Microsoft3-Month Access Review Process Failurereported in 1 day
2023-08-11closed2023-10-12MicrosoftTrusted Role Control Failurereported in 2 days
2023-08-10closed2023-11-02TWCAUndisclosed CAreported same day
2023-08-04closed2023-09-29Kamu SMcommonName not in SANreported same day
2023-07-31closed2023-09-29Disig Failure to Respond to Jun 2023 Apple Root Program Surveyreported in 3 days
2023-07-27closed2023-09-08GlobalSignThree (3) revoked precertificates with reasonCode “certificateHold”reported same day
2023-07-26closed2023-09-02DigiCertTLS certificates with incorrect policy OIDreported in 7 days
2023-07-25closed2023-09-29NAVER CloudcommonName not in SANreported same day
2023-07-21closed2023-10-12SHECAFailure to Submit Annual CCADB Self Assessment
2023-07-20closed2023-09-29MicrosecIncident report - No OCSP status response for 2 Precertificatesreported in 2 days
2023-07-13closed2023-09-29NAVER CloudOV certificate issued with OU fieldreported same day
2023-07-12closed2023-09-29NetlockCRL Error on CRL Watch of NETLOCK DVCA CRLreported same day
2023-07-11closed2023-07-19E-Tugraroots distrusted by Mozilla
2023-07-07closed2023-09-29MicrosoftCRL Publication Failuresreported in 1 day
2023-07-03closed2023-08-30AppleTLS certificates issued outside the TTL of the CAA recordreported in 4 days
2023-06-20closed2024-03-20BuypassDomain validation method using externally operated DNS toolsreported in 4 days
2023-06-16closed2023-09-29SHECAFailure to Respond to April 2023 Survey
2023-06-16closed2023-09-29TunTrustFailure to Respond to April 2023 Surveyreported same day
2023-06-16closed2023-10-12SHECAOutdated Organizational Units (OUs) problems in OV TLS certificatesreported in 2 days
2023-06-15closed2023-07-28Google Trust ServicesRevocation data publication delay for revoked unused subordinate CAsreported same day
2023-06-15closed2023-07-05Let's EncryptDuplicate Serial Numbersreported same day
2023-06-14closed2024-03-20BuypassDomain validation method using not allowed domain contactreported in 1 day
2023-06-14closed2024-01-19CFCAcertificate with an incorrect OrganizationNamereported same day
2023-06-13closed2023-06-26DigiCertSub CA with EV OIDs without audit reportreported in 8 days
2023-06-13closed2023-10-12IdenTrustCertificate with missing details flagged by OCSP Watchreported in 6 days
2023-06-08closed2023-11-02Google Trust ServicesFailure to respond to CPR within 24 hoursreported same day
2023-06-08closed2023-10-12ANF AC2023 Audit Report Finding
2023-06-05closed2023-09-29Hongkong PostInvalid EV cert businessCategoryreported same day
2023-06-02closed2023-09-22GlobalSignIssuance of test certificate (pre-certificate) for EV SSL/QWAC with no EKU extensionreported in 1 day
2023-05-17closed2023-11-19certSIGNFindings in 2023 ETSI Audit for certSIGN ROOT CA G2 - Audit Incident Report
2023-05-11closed2024-06-14SSL.comsubCA/Reseller Issues
2023-05-10closed2023-10-12Firmaprofesional2023 - documentary inconsistencyreported in 2 days
2023-05-09closed2023-06-02Asseco (Certum)Subordinate certificates with sequential serial numberreported same day
2023-05-02closed2023-06-28IdenTrustduplicate Certificate in error flagged by OCSP Watchreported in 1 day
2023-05-02closed2023-08-04NetlockPre-certificates revoked with certificateHold reason
2023-04-26closed2024-03-27SectigoLate termination of privileged access to Certificate Systemsreported in 6 days
2023-04-24closed2023-06-02SectigoCertificate issuance delayed for more than 398 days after DCV was completedreported in 7 days
2023-04-20closed2023-05-04GlobalSignCRLs reported in CCADB unavailablereported in 1 day
2023-04-19closed2023-05-05GoDaddyCRL Issuer Mismatchreported in 15 days
2023-04-18closed2023-09-29FNMTCRL problems displayed during the monitoringreported in 4 days
2023-04-14closed2023-06-30Telia Misissued certificate - wrong OrganizationName value "Hair 8 Brains"reported in 1 day
2023-04-13closed2023-05-04DigiCertOrg-JOI type mismatchreported in 7 days
2023-04-11closed2023-06-02Cybertrust Japan CRL signature algorithm encoding errorreported in 7 days
2023-04-06closed2023-07-20ActalisCertificates issued with validity period greater than 398 daysreported in 1 day
2023-04-03closed2023-09-02SecureTrustIncorrect organizationNamereported in 3 days
2023-03-31closed2023-07-05Telekom Security Improper use of a domain validation methodreported in 2 days
2023-03-24closed2023-07-20Actalispre-certificates with “certificateHold” as the revocation reasonreported in 1 day
2023-03-23closed2023-05-04WISeKeyPre-certificates revoked with certificateHold reasonreported same day
2023-03-23closed2023-04-07DigiCertInconsistent validation informationreported in 21 days
2023-03-21closed2023-04-05SectigoIncomplete Subscriber Agreement provisionsreported in 12 days
2023-03-17closed2023-05-19Asseco (Certum)Cross-certificate with wrong policy identifier
2023-03-09closed2023-04-13eMudhraCRL occasionally unavailable and returns 404 errorreported in 3 days
2023-03-03closed2023-06-16DigiCert4 CRLs unavailable or not respondingreported in 2 days
2023-03-03closed2023-07-28NetlockSSL certificates with OU fieldreported in 28 days
2023-02-28closed2023-03-24CertainlyCRL Issuing Distribution Point Mismatch in CCADBreported in 8 days
2023-02-27closed2023-09-29NetlockDisclosed CRL is expired
2023-02-24closed2023-03-20IdenTrustInaccurate CRL Details in CCADBreported in 4 days
2023-02-15closed2023-03-09MicrosoftFailure to modify policy documents within 365 daysreported in 1 day
2023-02-15closed2023-03-09DigiCertOCSP not responding issuereported in 6 days
2023-02-09closed2023-03-20Google Trust Servicesincorrect SCT in certificatereported same day
2023-02-07closed2024-04-17GLOBALTRUST (e-commerce monitoring)SCT in precertificatereported same day
2023-02-07closed2023-10-12SHECAorganizationName problems in OV and EV TLS certificatesreported same day
2023-02-07closed2023-04-19SwissSignCRL/OCSP revocation time mismatchreported same day
2023-02-07closed2023-06-08Asseco (Certum)Cross-Signed non-EV-audited root with an EV-enabled rootreported same day
2023-01-31closed2023-02-14DigiCertLate CP/CPS CCADB uploadsreported in 21 days
2023-01-31closed2023-05-04SectigoIncomplete Subject organizationNamereported in 8 days
2023-01-25closed2023-02-10SectigoLate CCADB update after CPS updatereported in 14 days
2023-01-10closed2023-09-29CFCACertificate with wrong crlDistributionPointsreported in 4 days
2023-01-04closed2023-02-03WISeKeyIncorrect businessCategory in EV certificatereported same day
2022-12-20closed2023-05-05IdenTrustBad OCSP Responsesreported in 5 days
2022-12-15closed2023-02-02Cybertrust JapanOne of the EV certificate was mis-issued with the incorrect Registration Number by Cybertrust Japan (CTJ)reported in 3 days
2022-12-09closed2023-04-19Hongkong PostSubject CN converted to Unicode representation incidentreported in 2 days
2022-12-08closed2023-02-03WISeKeyBad ECDSA algorithm encoding in test certificatereported in 1 day
2022-11-30closed2023-11-14TrustCorroots distrusted by Mozilla
2022-11-28closed2023-04-24EntrustEV TLS Certificate incorrect jurisdictionreported in 18 days
2022-11-28closed2023-09-29CFCAEV certificate with wrong PostalCode&Streetreported in 3 days
2022-11-18closed2023-07-21E-TugraIncident Report (Security Issues)reported in 5 days
2022-11-15closed2023-07-21SSL.comDelayed revocation of certificate with weak key
2022-11-14closed2022-12-05Amazon Trust Services404 error when fetching CRLreported same day
2022-11-08closed2022-12-12Let's EncryptEnd Entity CRLs Not Reissued On Timereported same day
2022-11-02closed2023-04-19CFCADelayed reporting of revocation of an intermediate CA certificatereported same day
2022-11-02closed2023-10-12SHECAUniTrust: EV certificate with wrong Registry Country Namereported in 63 days
2022-10-31closed2022-12-05SwissSign'c/o' in streetAddress of EV certificatereported same day
2022-10-28closed2022-11-26CertainlyServing Bad OCSP Responsesreported in 4 days
2022-10-21closed2022-11-28SectigoIssuance of ECC leaf certificates with non-DER encoded keyUsagereported in 1 day
2022-10-14closed2022-11-30Let's EncryptDelayed revocation for removed gTLDreported same day
2022-10-06closed2022-11-02DigiCertOrg information issue in new validation workflowreported in 7 days
2022-10-06closed2022-11-02IdenTrustMissing Revocation Reasons in CRLreported in 3 days
2022-10-05closed2022-11-26GoDaddyFailure to revoke 210 subscriber certificates within 24 hoursreported in 12 days
2022-10-05closed2022-12-26SectigoIncorrect JOIreported in 12 days
2022-10-05closed2022-10-26SectigoNon-existent hostname in CDP and AIA URLsreported in 13 days
2022-10-04closed2022-11-09WISeKeyIssuance of certificate with non-DER encoded keyUsagereported in 111 days
2022-10-04closed2023-01-15GoDaddyCRLs are version 1 and lack CRL Number extensionreported same day
2022-10-03closed2022-10-26Google Trust Servicesinvalid CRL reason codereported same day
2022-10-03closed2023-04-19TWCA"unknown" OCSP response for issued certificatesreported same day
2022-10-03closed2022-10-26Microsoft"unknown" OCSP response for issued certificatesreported same day
2022-10-03closed2022-10-26GlobalSignCRL contains invalid signature algorithmreported same day
2022-10-03closed2022-11-02D-TrustCRL not DER-encodedreported same day
2022-09-30closed2022-11-26Let's EncryptIncomplete and Inconsistent CRLsreported in 1 day
2022-09-30closed2023-06-30CFCAICA without EKUreported in 46 days
2022-09-23closed2023-04-19EntrustTLS Certificate issued with an incorrect state or provincereported in 8 days
2022-09-22closed2022-11-02IdenTrustExpired CRLsreported in 6 days
2022-09-13closed2023-03-24SSL.comIssuance of 1 EV TLS certificate using a Registration/Incorporation Agency not included in our approved public list.reported in 2 days
2022-09-06closed2022-10-26Let's EncryptCertificates issued to Elliptic Curve Debian Weak Keysreported in 60 days
2022-08-26closed2023-04-19SHECAEV certificate with wildcard domain in common name and SAN
2022-08-22closed2022-11-02DFN-PKIOCSP/CRL inconsistenciesreported in 3 days
2022-08-18closed2023-04-12NAVER CloudDV certificate issued with no subject alternative name extensionreported same day
2022-08-15closed2022-12-07SwissSignMissed deadline of publication of 6 CPs and 1 CP/CPSreported same day
2022-08-15closed2023-06-30CFCADelayed reporting of intermediate CA certificatereported in 59 days
2022-08-04closed2022-09-11Google Trust ServicesFailure to send preliminary report to subscriber within 24hreported in 2 days
2022-07-31closed2022-09-06GlobalSignEV certificate with wildcard domain in common name and SANreported in 1 day
2022-07-30closed2022-10-05SectigoMisspelled city name in localityName fieldreported in 16 days
2022-07-08closed2022-07-28IdenTrustIntermittent issuance/validation failures and website outagereported in 7 days
2022-07-05closed2023-04-19CFCAThe wrong status of OCSPreported in 30 days
2022-07-02closed2022-11-26AppleEV TLS pre-certificates issued without EKU extensionreported in 1 day
2022-06-28closed2022-08-15GoDaddyMisissuance of Cross Signed Certsreported in 6 days
2022-06-27closed2023-04-13SecureTrust2 certificates with non-DER encoded keyUsage extensionreported in 6 days
2022-06-22closed2022-07-15IdenTrustCRL Potential Publication Delay due to Cachereported in 9 days
2022-06-15closed2023-04-19CertignaCertificate issued with validity period greater than 398-daysreported in 1 day
2022-06-09closed2022-07-29Google Trust ServicesIncorrect OCSP responses for certain certificatesreported same day
2022-06-04closed2022-07-07AppleCRL issuance frequency deviates from CPS in some casesreported in 8 days
2022-06-03closed2022-06-22IdenTrustOCSP responses for subordinate CA exceed the validity period per CPS guidelinesreported in 11 days
2022-06-02closed2022-06-13E-TugraFailure to Respond to May 2022 Surveyreported same day
2022-06-02closed2022-06-13eMudhraFailure to Respond to May 2022 Surveyreported same day
2022-06-02closed2022-06-13iTrusChinaFailure to Respond to May 2022 Surveyreported same day
2022-06-02closed2022-06-13NAVER CloudFailure to Respond to May 2022 Surveyreported same day
2022-05-30closed2022-07-15Firmaprofesional2022 - Define Device Obsolescence Process
2022-05-30closed2022-07-01Firmaprofesional2022 - CPS without correct explanation about difference between OCSP and CRL
2022-05-30closed2022-06-22Firmaprofesional2022 - StateorProvince fieldreported same day
2022-05-27closed2022-07-01Google Trust ServicesOCSP responses not published in a timely mannerreported in 17 days
2022-05-27closed2022-08-19CFCAPrecertificate with postalCode and streetAddress swapped
2022-05-26closed2022-09-28AppleOCSP responders return ‘unknown’ for valid S/MIME and TLS certificatesreported in 3 days
2022-05-25closed2022-08-04CertainlyServing Expired OCSP Responsesreported in 1 day
2022-05-20closed2022-07-19Google Trust ServicesFailure to provide preliminary report within 24hreported in 8 days
2022-05-13closed2022-06-22Firmaprofesional2022 - SSL certificates issued with wrong Organization ID numberreported in 3 days
2022-05-13closed2022-07-15Cybertrust JapanFailed an annual CPS update of Cybertrust Japan (CTJ)reported in 2 days
2022-04-26closed2022-08-30EntrustTLS Certificate issued with a key that is impacted by the Close Primes vulnerabilityreported in 1 day
2022-04-21closed2022-10-14SecureTrustIncorrect OCSP responsereported in 14 days
2022-04-07closed2022-06-01eMudhraemSign CA Invalid AIA Extension Valuereported in 1 day
2022-04-05closed2022-05-25SectigoIncorrect OCSP responsesreported in 14 days
2022-04-05closed2022-06-04certSIGNIncorrect data in stateOrProvinceNamereported in 1 day
2022-04-02closed2022-06-01certSIGNSubscriber precertificate without Certificate Policiesreported in 3 days
2022-03-18closed2022-05-06GlobalSignOCSP responder certificates with more than 64 characters in CNreported in 1 day
2022-03-17closed2022-06-04GoDaddyOV Documentation Reusereported in 9 days
2022-03-16closed2022-05-06GlobalSignCertificate issued to FQDN with malformed CAAreported same day
2022-03-07closed2022-05-23Google Trust ServicesIncorrect OCSP response for issued certificatereported same day
2022-03-05closed2022-08-15IdenTrustFailure to provide OCSP responses for valid ICA certificatesreported in 12 days
2022-03-04closed2022-05-31IdenTrustPre-certificates without a final certificate showing OCSP errorreported in 9 days
2022-03-01closed2022-03-25Amazon Trust ServicesOverdue audit statements for intermediate certificatesreported in 56 days
2022-02-23closed2022-03-25IdenTrustEV TLS certificate with wrong jurisdiction state for private organizationreported in 12 days
2022-02-23closed2022-03-25SectigoSC45 DCV Reuse Errorreported in 22 days
2022-02-18closed2022-04-14IdenTrustEV TLS certificate with invalid Jurisdiction state for government entityreported in 7 days
2022-02-18closed2022-07-15D-TrustWrong key usage (Key Agreement)reported in 1 day
2022-02-09closed2022-04-14IdenTrustUnavailable CRL and OCSP Respondersreported in 5 days
2022-02-02closed2022-04-15IdenTrustValidation Source for EV Certificates not Publicly Disclosedreported in 7 days
2022-02-01closed2022-02-25Let's EncryptFailure to provide OCSP Responses for some certificatesreported in 3 days
2022-01-29closed2022-03-04Let's EncryptTLS Using ALPN Allows Additional Identifiers in Challenge Certificatereported in 1 day
2022-01-28closed2022-02-17CertainlyTLS Using ALPN TLS Version and OIDreported in 3 days
2022-01-25closed2022-03-04Let's EncryptTLS Using ALPN TLS Version and OIDreported same day
2022-01-17closed2022-06-04SSL.comIssuance of TLS certificates with domain validation methods prohibited by SC-45reported in 19 days
2022-01-08closed2022-09-07IdenTrustOCSP Signer Certificate Missing No-Check Extensionreported in 10 days
2021-12-29closed2022-01-14SectigoIncorrect JOI Country valuereported in 12 days
2021-12-20closed2022-01-14Amazon Trust ServicesMissing CAA Check For Test Website Certificatesreported in 4 days
2021-12-16closed2022-06-13KPN(KPN) Incorrect Subject OrganizationNamereported same day
2021-12-08closed2022-06-01eMudhraemSign CA Invalid OrganizationalUnitNamereported in 1 day
2021-12-07closed2022-01-14EntrustSSL Certificates issued with Un-verified IP Addressesreported in 1 day
2021-12-07closed2022-01-14DigiCertIssuance of certs with weak keys (ROCA)reported in 5 days
2021-12-07closed2022-04-14FNMTInvalid localityNamereported in 1 day
2021-12-06closed2022-01-28IdenTrustIssuance of OV SSL Certificate with doc vetting older than 398 daysreported in 3 days
2021-12-06closed2022-01-20GlobalSignEV certificates with serialNumber Government Entity and businessCategory Private Organizationreported in 3 days
2021-12-02closed2021-12-22Amazon Trust ServicesMisissuance of Subordinate Per CPSreported in 7 days
2021-11-23closed2022-01-13Let's EncryptPotential Denial of Service against websites with broad private key reusereported in 40 days
2021-11-23closed2022-04-15GoDaddyFailure to Revoke Subscriber Certificates within 24 hoursreported in 5 days
2021-11-20closed2021-12-06MicrosoftFailure to disclose Revocation of Intermediate CAs within 7 Days
2021-11-18closed2022-09-11SectigoOCSP responses directly signed using root certificates without KU=digitalSignature
2021-11-16closed2023-03-02CFCAOverdue Audit Statements 2021
2021-11-13closed2021-12-17SectigoIncorrect JOI for federal credit unionsreported in 37 days
2021-11-10closed2021-12-06MicrosoftUnrevoked 4 intermediate certificatesreported same day
2021-11-10closed2021-12-17SectigoFailure to block disallowed LDH labels in domain namesreported in 36 days
2021-11-01closed2022-09-28TWCAPolicy OID not set to indicate the assurance level to the issued certsreported same day
2021-10-29closed2021-11-26DigiCerthostnames not in preferred name syntaxreported in 3 days
2021-10-29closed2022-02-17IzenpeCRL and ARL exceed validity period value by one secondreported in 2 days
2021-10-28closed2022-06-04TeliaIssued three precertificates with non-NIST EC curvereported in 1 day
2021-10-28closed2021-11-04GDCACRL validity period exceeds allowed value by one secondreported in 6 days
2021-10-22closed2021-11-10Cybertrust JapanRoot CRLs exceed maximum validity period by one secondreported in 2 days
2021-10-21closed2022-03-08EntrustCRLs and OCSP responses not issued as specified in the CPSreported in 24 days
2021-10-15closed2022-02-17SectigoSubject field with unvalidated information included in certificatesreported in 15 days
2021-10-15closed2022-02-17TeliaInvalid email contact address was used for few domainsreported in 1 day
2021-10-15closed2021-11-10SECOMRoot CRLs exceed maximum validity period by 1 secondreported in 15 days
2021-10-14closed2023-10-12SHECAUniTrust: Improper DER results in failure to comply with RFC 5280 - Encoded sequence component with default valuereported same day
2021-10-14closed2021-11-04SectigoCRL validity beyond CPS allowed valuereported in 16 days
2021-10-11closed2021-10-20Let's EncryptMis-issued certificates related to SC48v2reported same day
2021-10-08closed2021-11-04GoDaddyCPR responses greater than 24 hoursreported in 11 days
2021-10-08closed2022-01-28IdenTrustMis-Issued EV Certificatesreported in 11 days
2021-10-08closed2021-10-26IdenTrustIntermitent interruptions to DNS servicereported in 8 days
2021-10-06closed2021-11-04GoDaddyRoot CRLs exceed maximum validity period by 1 secondreported in 13 days
2021-10-05closed2021-10-20SwissSignwrong address in EV certificatereported in 1 day
2021-09-28closed2021-10-14DigiCertrevocation services validity set to expected value plus one second
2021-09-27closed2021-11-04CertainlyRoot CRL validity period exceeds maximum by one secondreported in 5 days
2021-09-24closed2021-10-27SectigoTruncated registration numbers in EV certificatesreported in 24 days
2021-09-22closed2021-11-05GoDaddyIssued EV Wildcard Certificatereported in 2 days
2021-09-21closed2021-10-20EntrustTest Website Certificates Expiredreported in 745 days
2021-09-16closed2021-10-20Google Trust ServicesCRL validity period set to expected value plus one secondreported in 6 days
2021-09-11closed2021-09-29AppleTest website certificates expiredreported in 2 days
2021-09-07closed2021-10-15Let's EncryptDelay updating OCSP responsesreported same day
2021-09-03closed2021-10-20Google Trust ServicesDelayed publication of CPS removing DNS Operator Exceptionreported in 3 days
2021-09-02closed2021-12-13EntrustIncorrect value in Business Category field for Government Entitiesreported in 1 day
2021-09-02closed2022-01-11eMudhraAudit Delay
2021-08-31closed2022-02-09MicrosecMisissuance of one OV certificate with Key Usage KeyEnciphermentreported same day
2021-08-28closed2021-09-20DigiCertTruncation of Registration Numberreported in 5 days
2021-08-18closed2021-11-04Network SolutionsAll test CA test website certificates are expiredreported in 8 days
2021-08-10closed2021-12-06Network Solutions2021 Audit Observation #1
2021-08-06closed2021-10-03MicrosoftOverdue Audit Reports 2021reported in 3 days
2021-08-06closed2021-09-02AppleIntermediate CA certificates omitted from audit statementreported in 3 days
2021-08-06closed2022-06-22SSL.comIncorrect Domain Validation for 1 TLS certificate with FQDN having "www." string within domain labelsreported in 11 days
2021-08-06closed2021-09-10SecureTrustDelayed revocation of a customer revoke requestreported in 1 day
2021-08-06closed2022-03-21SectigoMojibake in certificate Subject fieldsreported in 25 days
2021-08-05closed2021-10-22DigiCertincorrect OCSP response for precertificatereported in 14 days
2021-07-30closed2021-10-20Network SolutionsFailure to respond in time to revocation requestsreported in 45 days
2021-07-23closed2022-06-24SSL.comIssuance of 3 EV TLS certificates without 2-person validation of the organization informationreported in 10 days
2021-07-20closed2021-10-20Network SolutionsOverdue Audit Statements 2021reported in 19 days
2021-07-19closed2021-12-01SectigoMissing registration numbers in EV certificatesreported in 38 days
2021-07-15closed2021-09-07SectigoState name in localityNamereported in 6 days
2021-07-15closed2022-10-05SecureTrustInvalid localityNamereported in 1 day
2021-07-09closed2021-11-26SSL.comIssuance of an EV TLS certificate with incorrect O Field Valuereported in 3 days
2021-07-07closed2022-01-11KPNKPN CPS Lists Forbidden Domain Validation Method 3.2.2.4.6reported same day
2021-07-02closed2021-08-06MicrosoftMalformed ICAs (Key Usage Malformed)reported in 8 days
2021-06-30closed2021-07-28Sectigo2020 failure to respond to CPRs discoveredreported in 49 days
2021-06-30closed2021-08-12SectigoDCV Reuse after 825 daysreported in 19 days
2021-06-29closed2021-09-10Asseco (Certum)Forward dating certificates (notBefore in the future)
2021-06-29closed2021-07-14certSIGNCPS specifies md5 and sha1WithRSAEncryption as useable signature typesreported same day
2021-06-29closed2021-08-18Sectigo"Manual DCV" method usedreported in 41 days
2021-06-28closed2021-08-12IdenTrustCertificates with Invalid values for stateOrProvinceNamereported same day
2021-06-23closed2021-10-20Firmaprofesional2021 Audit Report Finding 2 out of 3
2021-06-23closed2021-08-13Firmaprofesional2021 Audit Report Finding 1 out of 3reported in 86 days
2021-06-20closed2021-10-03ActalisIssuance of intermediates after 2020-08-20 that do not comply with Mozilla Policy and the Baseline Requirementsreported same day
2021-06-17closed2021-11-04SECOMIntermediate CA Certificates Missing from Audit Reportsreported in 92 days
2021-06-17closed2021-07-30Asseco (Certum)CPS does not refer to BR domain validation methodsreported same day
2021-06-17closed2021-12-02E-TugraForbidden Domain Validation Method 3.2.2.4.6reported same day
2021-06-16closed2022-01-14NetlockIntermediate CA Certificate Missing from Audit Reportsreported same day
2021-06-16closed2022-02-17E-TugraIntermediate CA Certificate Missing from Audit Reportsreported same day
2021-06-15closed2022-03-25TWCAIntermediate CA Certificate Missing from Audit Reportsreported same day
2021-06-12closed2021-07-08GLOBALTRUST (e-commerce monitoring)Revoked test website not using revoked certificate
2021-06-12closed2021-09-15GLOBALTRUST (e-commerce monitoring)CN domain not in SAN
2021-06-11closed2021-08-18SectigoIncorrect EV businessCategoryreported in 7 days
2021-06-09closed2021-12-01Let's Encryptcertificate lifetimes 90 days plus one secondreported in 1 day
2021-06-07closed2021-08-27SectigoMisspellings in stateOrProvince or localityName fieldsreported in 19 days
2021-06-07closed2021-07-30GlobalSignIncorrect RegNumber-Org Type combinationreported in 4 days
2021-06-04closed2021-07-16SectigoForbidden Domain Validation Methodreported in 32 days
2021-06-03closed2021-06-23DigiCertIncorrect RegNumber-Org Type combinationreported in 5 days
2021-06-02closed2021-07-30SectigoIncorrect locality informationreported in 27 days
2021-06-02closed2021-07-30Amazon Trust ServicesForbidden Domain Validation Method 3.2.2.4.6
2021-06-02closed2021-09-07Amazon Trust ServicesCP/CPS does not specify key compromise methods
2021-05-31closed2021-07-30Amazon Trust ServicesALV Errorsreported in 486 days
2021-05-25closed2021-10-27iTrusChinaverification errors for the roots' CRLs(ARL)reported in 1 day
2021-05-20closed2021-10-20Sectigotest certificates issued from trusted CAreported in 1 day
2021-05-20closed2021-10-22SectigoInappropriate subject:serialNumber information in EV certificates obtained through ACMEreported in 15 days
2021-05-20closed2021-12-13EntrustInvalid localityNamereported in 1 day
2021-05-17closed2021-06-11Telekom Security Certificate with invalid FQDNreported in 1 day
2021-05-14closed2021-07-16Asseco (Certum)Incorrect localityNamereported same day
2021-05-13closed2022-02-09MicrosoftMalformed ICAs (missing certificate policy extensions)reported in 9 days
2021-05-12closed2021-06-03DigiCertInvalid localityNamereported same day
2021-05-10closed2021-06-03DigiCertInvalid stateOrProvinceNamereported same day
2021-05-08closed2021-07-12SectigoInvalid stateOrProvinceNamereported same day
2021-05-04closed2021-07-08Asseco (Certum)Invalid stateOrProvinceName field (recurrent incident)reported same day
2021-05-03closed2021-07-30Google Trust ServicesSigning SHA-1 Hash for existing CA certificate with changes in Key Usage
2021-05-03closed2021-07-14IdenTrustUnavailable CRL for IdenTrust ‘DST Root CA X3’.reported in 3 days
2021-05-03closed2021-08-13TWCAInvalid stateOrProvinceNamereported same day
2021-05-02closed2021-06-11KIRCertificates issued greater than stated in CPSreported in 4 days
2021-05-01closed2021-07-08SectigoInvalid postalCode fieldreported same day
2021-04-30closed2021-10-06GlobalSignInvalid stateOrProvinceName and locality pairreported same day
2021-04-29closed2021-08-25Google Trust ServicesFailure to provide regular and timely incident updatesreported same day
2021-04-22closed2021-08-13GlobalSignInvalid countryNamereported same day
2021-04-22closed2021-08-25Google Trust ServicesForbidden Domain Validation Method 3.2.2.4.10reported same day
2021-04-22closed2021-07-30KPNKPN issued Invalid organizationalUnitNamereported same day
2021-04-22closed2021-06-07MicrosoftCertificate Mis-Issuance, DNSName is not FQDN, Preferred Name Syntaxreported in 2 days
2021-04-17closed2021-07-14KIRCP/CPS contains noncompliant DV method, does not specify CAA domains
2021-04-16closed2021-07-12KIRDV certificates with locality name, organization name and stateOrProvinceNamereported in 211 days
2021-04-16closed2021-06-07DFN-PKIMultiple commonName in certificates
2021-04-16closed2021-07-26KIRMany certificates with OCSP Unknownreported same day
2021-04-16closed2022-01-28KIRInvalid organizationNamereported same day
2021-04-15closed2021-07-30SECOMCP/CPS does not clearly specify domain validation methodsreported same day
2021-04-15closed2021-09-20MicrosoftUnderscore in SANreported same day
2021-04-15closed2021-07-16KIRInvalid localityName + CRL Revoked but OCSP Unknownreported in 318 days
2021-04-14closed2021-09-10KIRCN domain not in SANreported same day
2021-04-09closed2021-04-30FNMTMinor non-conformities in 2021 audit statementreported in 63 days
2021-04-07closed2021-06-23Telekom SecurityKey Encipherment in two ECC SAN TLS certificatesreported in 1 day
2021-03-25closed2021-07-04MicrosoftFailure to disclose Unconstrained Intermediate within 7 Daysreported in 1 day
2021-03-22closed2021-06-11Firmaprofesionalincorrect reserved CA/B Forum OIDs in certificatesreported same day
2021-03-19closed2021-04-19HARICACertificates with invalid policy treereported in 1 day
2021-03-16closed2021-04-19SectigoZeroSSL: failure to revoke within 24 hours
2021-03-08closed2021-03-26FNMTMissisuance of web site certificates without CA/Browser Forum’s reserved policy OIDreported same day
2021-03-03closed2021-07-16EntrustIncorrect Jurisdiction Country Value in an EV Certificatereported same day
2021-03-02closed2021-04-19SECOMOutdated audit statements for intermediate certificatesreported same day
2021-03-02closed2021-11-04SECOMFUJIFILM intermediate CA Certificate not listed in audit statementreported same day
2021-03-01closed2021-08-06SECOMUnqualified domain name in SANreported same day
2021-02-22closed2021-04-19SectigoInadequate DCVreported in 12 days
2021-02-20closed2021-04-07MicrosoftPolicy Documentation, Failure to update Domain Validation Methodreported in 10 days
2021-02-20closed2021-07-16MicrosoftPolicy Documentation, Failure to update Subscriber Certificate Max Validity Periodreported in 16 days
2021-02-17closed2021-03-19DigiCertFailure to find and revoke key-compromised certificates within 24 hoursreported same day
2021-02-12closed2021-03-19CamerfirmaOld CAs with an RSA modulus size of 2047 bitsreported in 7 days
2021-02-09closed2021-03-11SwissSignCertificate with key length 4098 bitreported in 4 days
2021-02-05closed2021-03-11D-TrustCertificate with RSA key where modulus is not divisible by 8reported in 1 day
2021-02-04closed2021-02-23Camerfirmaroots distrusted by Mozilla
2021-02-04closed2021-05-07GlobalSignRSA-1024 leaf certificate issued after 2013-12-31reported same day
2021-01-29closed2021-02-08TeliaDisallowed curve (P-521) in leaf certificatereported same day
2021-01-23closed2021-03-19CamerfirmaNo disclosure of verification sources
2021-01-22closed2021-03-19Intesa SanpaoloCP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliantreported same day
2021-01-19closed2021-04-07E-TugraDelayed Response of Revocation Requestreported in 4 days
2021-01-18closed2021-04-07E-TugraIntermittent OCSP response with status 'Unknown'reported same day
2021-01-16closed2021-04-07E-TugracommonName not in SANreported in 1 day
2021-01-07closed2021-03-19CamerfirmaCertificates without CABForum OV Reserved Policy Identifierreported same day
2021-01-06closed2021-07-16EntrustIncorrect Business Category Value Discovered in an EV SSL Certificatereported in 1 day
2020-12-29closed2021-03-07DigiCertSHA-1 intermediate issued after 2016-01-01reported in 1 day
2020-12-23closed2021-04-07Let's EncryptFailure to audit log subscriber certificate OCSP updatesreported in 1 day
2020-12-14closed2021-02-26D-TrustPrivate Key Disclosed by Customer as Part of CSRreported in 20 days
2020-12-02closed2022-02-18NetlockReplacement of enduser certificates after the EVGL 1.7.4 self-auditreported in 12 days
2020-12-01closed2021-02-12MULTICERTcertificate with an incorrect OrganizationNamereported in 4 days
2020-11-20closed2021-01-15SSL.comWildcard DV certificate issued with a non-validated domain namereported in 2 days
2020-11-19closed2021-03-07IdenTrustInvalid OCSP Response Held in Cachereported in 34 days
2020-11-19closed2021-04-19Google Trust ServicesInvalid ASN.1 encoding of singleExtensions in OCSP responsesreported in 14 days
2020-11-17closed2021-06-01SwissSignduplicate serial numberreported same day
2020-11-14closed2021-03-07IdenTrustService Degradationreported in 8 days
2020-11-13closed2021-02-08AppleOCSP availability 2020-11-12reported in 1 day
2020-11-10closed2021-01-27NetlockCumulative report connected to EV verificationreported in 15 days
2020-11-10closed2021-04-07NetlockIssuance of >398-day precertificates after 2020-09-01reported in 15 days
2020-11-10closed2021-06-11MicrosecCertificate validity period greater than 398 days
2020-11-06closed2020-12-15DigiCertPrivate Keys Disclosed by Customers as Part of CSRreported in 14 days
2020-11-04closed2021-04-07Telekom SecurityWrong jurisdiction entries in certificatesreported in 2 days
2020-11-02closed2021-04-07certSIGNmisissued an OV SSL certificate with no organizationName and localityName, instead of a DV SSL as requested by clientreported in 2 days
2020-10-31closed2021-05-20MicrosoftDV certificate issued with OV fieldsreported same day
2020-10-31closed2020-11-13TeliaCertificates with RSA keys where modulus is not divisible by 8reported in 12 days
2020-10-23closed2020-12-11EntrustSubscriber provides private key with CSRreported in 4 days
2020-10-22closed2021-01-22CamerfirmaIncorrect disclosure of Intesa Sanpaolo sub-CAreported same day
2020-10-21closed2021-01-22Camerfirmacertificate for unregistered domain cuatis.netreported same day
2020-10-21closed2021-03-19Camerfirmasuspicious certificate for com.comreported same day
2020-10-20closed2020-12-09DFN-PKIFinding in 2020 ETSI auditreported in 69 days
2020-10-19closed2021-03-19CamerfirmaFailure to abide by Section 8 of Mozilla Policy: Unauthorized, improperly disclosed Subordinate CA
2020-10-15closed2021-01-22IdenTrustInconsistent Disclosure of Externally-Operated Intermediatereported same day
2020-10-14closed2021-02-12SwissSignFailure to provide a preliminary report within 24 hours.reported in 1 day
2020-10-13closed2021-02-08SwissSignInvalid stateOrProvinceName fieldreported same day
2020-10-11closed2021-01-22DisigFailure to provide a preliminary report within 24 hours.reported in 2 days
2020-10-09closed2021-06-07MicrosoftCertificate Mis-Issuance, DNSNames must have a valid TLDreported same day
2020-10-07closed2020-12-29AppleEmpty SingleExtension in OCSP responsesreported in 2 days
2020-10-06closed2021-01-27IdenTrustIssuance of Subordinate CA’s Without EKUreported same day
2020-10-06closed2021-04-08DigiCertOverdue audit statements for intermediate certificates
2020-09-29closed2021-02-12GlobalSignInvalid stateOrProvinceName valuereported in 4 days
2020-09-29closed2020-11-20GlobalSignFailure to provide a preliminary report within 24 hoursreported in 4 days
2020-09-29closed2021-02-08Asseco (Certum)Invalid stateOrProvinceName fieldreported in 3 days
2020-09-29closed2021-03-07GlobalSignEmpty SingleExtension in OCSP responsesreported in 22 days
2020-09-28closed2020-12-11Google Trust ServicesCertificates not disclosed in CCADBreported in 45 days
2020-09-28closed2021-04-07SecureTrustInaccurate value in stateOrProvinceNamereported in 2 days
2020-09-28closed2021-03-11SecureTrustFailure to provide a preliminary report within 24 hours.reported in 2 days
2020-09-28closed2021-03-31CertignaCertificates issued with validity periods greater than 398-daysreported same day
2020-09-27closed2021-01-27EntrustFailure to provide a preliminary report within 24 hours.reported same day
2020-09-27closed2020-11-19Asseco (Certum)Failure to provide a preliminary report within 24 hours.reported in 1 day
2020-09-26closed2020-11-13DigiCertIncorrect keyUsage for ECC certificatereported same day
2020-09-25closed2020-10-31EntrustIncorrect keyUsage for ECC certificatereported same day
2020-09-25closed2021-03-19InfoCertInvalid stateOrProvinceName fieldreported same day
2020-09-23closed2020-10-31SSL.comInsufficient validation evidence for the localityName attribute of an OV certificatereported in 36 days
2020-09-18closed2020-10-09Let's Encrypt302 total OCSP responses available beyond acceptable timelinesreported in 10 days
2020-09-17closed2020-10-16eMudhraemSign CA ECC Test Certificate Misissuancereported in 7 days
2020-09-10closed2021-03-11GlobalSignSHA-256 hash algorithm used with ECC P-384 keyreported in 107 days
2020-09-09closed2021-07-16TunTrustOCSP unreachablereported in 1 day
2020-09-03closed2021-03-31IdenTrustIssuance of certificates greater than 398 daysreported in 1 day
2020-09-02closed2020-10-13GoDaddyDV certificates with organizationalUnit field in subject
2020-09-02closed2021-02-26GoDaddyCertificates issued with validity periods greater than 398-daysreported same day
2020-09-01closed2020-10-05GDCAIncorrect Value in organizationName Fieldreported in 6 days
2020-09-01closed2020-10-21DigiCertOCSP responder returning invalid responsesreported in 8 days
2020-08-31closed2020-09-14SwissSignOCSP responder unreachablereported same day
2020-08-17closed2020-11-04E-Tugraaudit delay because of an environmental disaster/pandemicreported in 28 days
2020-08-16closed2020-10-05AppleEV Certificate Approver Authorizationreported in 3 days
2020-08-13closed2020-10-05MicrosoftFirewall log data retentionreported in 15 days
2020-08-13closed2020-10-16GlobalSignIncorrect Jurisdiction of Incorporation information for Japanreported same day
2020-08-12closed2021-06-07EntrustInvalid data in State/Province Fieldreported in 2 days
2020-07-28closed2021-02-08Telekom SecurityCRL also contained unrevoked certificatesreported in 5 days
2020-07-24closed2020-12-15DigiCertMalformed ICA
2020-07-23closed2020-11-04GlobalSignCertificates with RSA keys where modulus is not divisible by 8reported in 6 days
2020-07-22closed2020-09-09GlobalSignUse of Domain Validation Random Value for more than 30 daysreported in 23 days
2020-07-21closed2020-10-05BuypassPSD2 QWAC with RSA modulus not divisible by 8reported in 4 days
2020-07-17closed2020-11-04IdenTrustOCSP Responder missing id-pkix-ocsp-nocheckreported in 3 days
2020-07-17closed2020-08-10SectigoCertificates with RSA keys where modulus is not divisible by 8reported same day
2020-07-17closed2020-08-02DigiCertKey Size Not Divisible By 8reported in 4 days
2020-07-16closed2020-12-09Izenpeincorrect value in stateOrProvinceNamereported in 25 days
2020-07-14closed2020-09-21MicrosoftIncomplete Logical Access Review Audit Evidencereported in 181 days
2020-07-13closed2021-05-20Google Trust ServicesdigitalSignature KeyUsage not setreported in 7 days
2020-07-09closed2021-01-27Telekom SecurityFinding in 2020 ETSI-Audit regarding weekly review of changes to configurationsreported in 107 days
2020-07-07closed2020-11-13DFN-PKI42 certificates with RSA modulus size in bits not divisable by 8reported in 1 day
2020-07-07closed2021-01-22Izenpecertificate issued to internal domainreported in 1 day
2020-07-06closed2020-10-07DigiCertInconsistent EV auditsreported in 4 days
2020-07-06closed2021-04-07SectigoCPR response issuesreported in 11 days
2020-07-02closed2020-08-31DigiCertCPS inconsistencies
2020-07-02closed2020-09-14GlobalSignCross Certificate with non-conforming CABF Policy OIDsreported in 52 days
2020-07-02closed2021-03-31PKIoverheidIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-07-26AtosIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-08-07SECOMIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-08-07ActalisIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2021-03-11DigiCertIncorrect OCSP Delegated Responder Certificatereported in 1 day
2020-07-02closed2020-08-07MicrosecIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-12-09HARICAIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-08-07CamerfirmaIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-08-07FirmaprofesionalIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-09-09SK ID SolutionsIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-08-07Telekom SecurityIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2020-08-10WISeKeyIncorrect OCSP Delegated Responder Certificatereported same day
2020-07-02closed2021-04-07DigiCertIncorrect OCSP Delegated Responder Certificate
2020-07-02closed2022-02-11GlobalSignIncorrect OCSP Delegated Responder Certificatereported in 1 day
2020-07-01closed2020-11-10DigiCertFailure to provide a preliminary report within 24 hours.reported in 1 day
2020-07-01closed2021-02-08Firmaprofesional2020 Audit Report Finding 4 out of 4reported in 78 days
2020-07-01closed2020-09-21Firmaprofesional2020 Audit Report Finding 3 out of 4
2020-07-01closed2020-11-09Firmaprofesional2020 Audit Report Finding 2 out of 4
2020-06-30closed2020-09-21Firmaprofesional2020 Audit Report Finding 1 out of 4reported in 77 days
2020-06-29closed2020-10-31DigiCertFailure to provide a preliminary report within 24 hours.reported in 2 days
2020-06-28closed2020-12-09Actalisinaccurate value in stateOrProvinceNamereported in 1 day
2020-06-26closed2021-03-31SectigoFailure to provide a preliminary report within 24 hours.reported in 2 days
2020-06-25closed2020-10-31SectigoPotential audit report delayreported same day
2020-06-25closed2020-09-21EntrustSHA-256 hash algorithm used with ECC P-384 keyreported in 8 days
2020-06-22closed2021-04-30D-TrustWrong key usage (Key Encipherment)reported same day
2020-06-21closed2020-09-14IzenpeFailure to provide a preliminary report within 24 hours.reported same day
2020-06-20closed2020-08-02DigiCertinconsistent disclosure of externally-operated intermediatereported same day
2020-06-20closed2020-08-07GoDaddyAgreed-Upon Website Domain Validation Method Issuereported in 10 days
2020-06-18closed2020-08-02SecureTrustMetadata-only field values in 2 certificatesreported in 6 days
2020-06-17closed2020-07-24GoDaddy Document Reuse Issuereported in 15 days
2020-06-15closed2021-02-23GoDaddyExpired CRLsreported in 11 days
2020-06-14closed2020-07-26DigiCert EV serialNumber with "none"reported same day
2020-06-14closed2021-05-11SectigoLack of input validation in stateOrProvinceName
2020-06-12closed2020-08-13Let's EncryptExpired ISRG Root OCSP X1 Certificatereported in 4 days
2020-06-11closed2020-08-02MicrosoftCertificate Mis-Issuance, Locality Missingreported in 43 days
2020-05-26closed2020-08-05DigiCertdelayed publication of revocation informationreported in 1 day
2020-05-22closed2020-11-17GoDaddyFailure to revoke certificate with compromised key within 24 hoursreported in 1 day
2020-05-21closed2020-09-09SectigoFailure to revoke key-compromised certificatesreported same day
2020-05-21closed2020-08-13SectigoFailure to revoke key-compromised certificate within 24 hoursreported in 8 days
2020-05-21closed2020-07-06DigiCertFailure to revoke key-compromised certificate
2020-05-21closed2020-11-19DigiCertFailure to revoke key-compromised certificates within 24 hoursreported same day
2020-05-21closed2020-06-18GlobalSignFailure to revoke key-compromised certificate within 24 hoursreported same day
2020-05-21closed2020-07-26Let's EncryptFailure to revoke key-compromised certificate within 24 hoursreported same day
2020-05-20closed2020-08-31Asseco (Certum)Incorrect OCSP response encodingreported same day
2020-05-18closed2020-08-02DigiCert"Internet Widgits Pty Ltd" in organizationalUnitName
2020-05-14closed2020-05-19TeliaAIA CA Issuer field pointing to PEM encoded certreported in 3 days
2020-05-11closed2020-07-26MULTICERTAIA CA Issuer field pointing to PEM encoded certreported same day
2020-05-08closed2020-08-07IdenTrustOCSP Outagereported same day
2020-05-07closed2020-07-26SwissSignfailure to provide a preliminary report within 24 hoursreported same day
2020-05-07closed2020-07-07SwissSignduplicate serial numberreported same day
2020-05-06closed2020-07-08SectigoFailure to properly respond to a report of subscriber key compromisereported in 2 days
2020-05-04closed2020-10-13IdenTrustIncorrect Subject Details for HydrantIdreported in 6 days
2020-05-04closed2020-10-05EntrustPrintable String Constraint Failurereported in 4 days
2020-05-01closed2020-08-07Google Trust ServicesIncorrect revocation data temporarily served for GTS Y3 & Y4reported in 14 days
2020-04-23closed2021-07-04BuypassIllegal Business Category in a PSD2 QWACreported in 2 days
2020-04-17closed2020-07-06GlobalSignCertificate issued with RSASSA-PSS public keyreported in 1 day
2020-04-14closed2020-04-15Google Trust ServicesInvalid OCSP responsesreported in 814 days
2020-04-14closed2020-05-21Google Trust ServicesOCSP serving issue 2020-04-09reported in 6 days
2020-04-10closed2020-04-19TWCAMisissued certificate: Invalid organizationUnitNamereported same day
2020-04-06closed2020-05-19Let's EncryptFailure to revoke key-compromised certificates within 24 hoursreported in 1 day
2020-04-02closed2020-04-06WISeKeyIssuance of certificate with two potentially conflicting policy OIDsreported in 5 days
2020-04-01closed2020-05-31FNMTMinor non-conformities in 2020 audit statement
2020-03-30closed2020-05-19BuypassMissing NCA identifier in cabfOrganizationIdentifier in PSD2 QWACsreported in 4 days
2020-03-29closed2020-08-07MicrosecALV Failures
2020-03-29closed2020-05-22SectigoFailure to revoke certificate with previously-compromised key within 24 hoursreported in 2 days
2020-03-26closed2020-05-29Let's EncryptFailure to revoke key-compromised certificates within 24 hoursreported in 7 days
2020-03-24closed2020-07-20DigiCertIssuance of Cert with Compromised Keyreported in 2 days
2020-03-24closed2020-07-29DigiCert Failure to revoke certificates with compromised private keysreported in 4 days
2020-03-18closed2020-05-13TrustisGap between audit periods
2020-03-18closed2020-08-07CamerfirmaInvalid authorityKeyIdentifier - recurrent incidentreported in 7 days
2020-03-18closed2020-07-26GlobalSignMisissuance of QWAC Certificatesreported in 13 days
2020-03-14closed2020-07-27MicrosecIssuance of 2 IVCP precertificates without givenName, surName, localityName fieldsreported in 4 days
2020-03-14closed2020-08-16GlobalSignOCSP Status HTTP 530reported in 4 days
2020-03-09closed2020-03-14GlobalSignUntimely revocation of TLS certificate after submission of private key compromisereported in 1 day
2020-03-07closed2020-03-28SSL.comIssued precertificate with Debian Weak Keyreported same day
2020-03-02closed2020-08-11SectigoFailure to provide a preliminary report within 24 hoursreported in 5 days
2020-02-29closed2020-09-09Let's EncryptCAA Rechecking bugreported same day
2020-02-26closed2020-04-06DigiCertFailure to properly encode Subject namereported in 12 days
2020-02-11closed2020-03-12CertignaIntermediate CAs missing audits
2020-02-10closed2020-03-05SK ID SolutionsALV failures on intermediate certificates
2020-02-10closed2020-07-29GRCAALV failures on intermediate certificates
2020-02-10closed2020-02-12Chunghwa TelecomALV failures on intermediate certificates
2020-02-10closed2020-05-21TeliaTwo Intermediate CA certificates not listed in audit reportreported in 34 days
2020-02-10closed2020-05-21WISeKeyUnofficial DBA in Organization fieldreported in 3 days
2020-02-05closed2020-05-18DigiCertWTCA / WTBR Audit 2019 - Matters to be resolved
2020-02-05closed2020-04-01CFCARepeated unexplained delays in providing timely status updates
2020-02-05closed2020-08-11SwissSignMisissuance with mispellings in Location for a number of Certificatesreported in 56 days
2020-02-03closed2020-02-07Firmaprofesional2019 audit Finding #2 - 6.4 Facility, management, and operational controls
2020-01-30closed2020-02-27Google Trust Servicesinvalid curve-hash combinationreported in 3 days
2020-01-30closed2020-05-21TeliaAmbiguity on KeyUsage with ECC public keyreported in 2 days
2020-01-24closed2020-06-02Asseco (Certum)Invalid value in SAN dNSNamereported same day
2020-01-23closed2020-02-07EntrustCompromised Private Key was not Revoked in Less than 24 Hoursreported in 3 days
2020-01-21closed2020-02-07Firmaprofesional2019 audit Finding #1 - 6.2 Identification and Authorization
2020-01-20closed2020-10-13D-TrustIssuance of non-conformant SSL certificatereported same day
2020-01-17closed2020-02-22SSL.comIntermediate certificate not listed in audit reportsreported in 57 days
2020-01-16closed2020-02-22PKIoverheidMissing Intermediate CA from audit statementreported in 52 days
2020-01-15closed2020-01-24WISeKeyTypo in Organization fieldreported same day
2020-01-10closed2020-01-17CFCAWrong OrganizationNamereported in 1 day
2019-12-30closed2020-05-22Firmaprofesional2019 Audit Report Findings
2019-12-26closed2020-03-14SecureTrustBR Audit 2019 - matters to be resolved
2019-12-24closed2020-06-29GoDaddyDomain Validation Reuse Issuereported in 7 days
2019-12-20closed2020-01-22GlobalSignOCSP responders found to respond signed by the default CA when passed an invalid issuer in requestreported in 2 days
2019-12-19closed2020-02-05PKIoverheidMissing intermediate CA certificates in WTBR audit statements Staat der Nederlanden 2017/2018reported in 24 days
2019-12-16closed2020-03-14Microsoftproblem reporting e-mail in CPS does not workreported same day
2019-12-11closed2020-01-21MicrosoftLoss of Archived Firewall logs from Retention Storereported in 90 days
2019-12-03closed2020-01-22SecureTrustUnconstrained Intermediate CA Certificate not included in WTBR audit reportreported in 7 days
2019-11-29closed2019-12-09Asseco (Certum)EV Certificates issued with wrong Business Categoryreported in 4 days
2019-11-28closed2020-01-21CamerfirmaEV Certificates issued with wrong Business Categoryreported in 3 days
2019-11-27closed2020-01-22GlobalSignWrong business category (Non Commercial Entity when should have been Private Organization)reported in 2 days
2019-11-26closed2019-12-24D-TrustEV certificates with incorrectly used businessCategory entryreported in 1 day
2019-11-26closed2020-04-06TrustCorNo mention of TLS-capable Intermediate CAs in WTBR audit reportsreported in 49 days
2019-11-26closed2020-02-08EntrustEV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"reported in 1 day
2019-11-23closed2020-04-01ApplePatch Managementreported in 9 days
2019-11-21closed2020-03-25MicrosoftNull Character Bug and Microsoft Root CAsreported in 17 days
2019-11-21closed2019-12-03Asseco (Certum)Intermediate CA certificates not listed in audit reportreported same day
2019-11-20closed2020-07-28SectigoCCADB failed ALV - Ensured Root CAreported in 43 days
2019-11-20closed2020-07-08Sectigo Missing Intermediate CA Certificate in Audit - D-TRUST CA 2-1 2015reported in 43 days
2019-11-20closed2020-10-31SectigoCCADB failed ALV - Network Solutions Certificate Authorityreported in 43 days
2019-11-17closed2019-12-04HARICA3 EV TLS Certificates without L or STreported same day
2019-11-15closed2019-12-03FNMTCP/CPS lack CAA processing details
2019-11-15closed2019-12-03VerizonVerizon CPS lacks CPR problem reporting instructionsreported same day
2019-11-15closed2020-01-22KPNKPN CPS lacks CPR problem reporting instructionsreported same day
2019-11-15closed2019-12-14IzenpeIntermediate CA certificates not listed in audit reportreported in 1 day
2019-11-12closed2020-01-24DigiCertDomain validation skippedreported in 5 days
2019-11-08closed2020-04-01BuypassIntermediate certificates not listed in audit reportsreported in 23 days
2019-11-04closed2019-12-24DigiCert& character in a printableString in ICA
2019-11-04closed2020-09-21Sectigoinvalid subject:organizationalUnitName on DV certificatesreported in 3 days
2019-11-01closed2020-01-22DigiCert Incorrect EV businessCategoryreported in 18 days
2019-10-24closed2021-03-31GlobalSignICAs in CCADB, without EKU extension are listed in WTCA report but not in WTBR reportreported in 8 days
2019-10-23closed2020-06-29SectigoEV SSL Certificates with incorrect businessCategoryreported in 1 day
2019-10-23closed2019-12-27Consorci AOCMisissued certificates: commonName:organizationIdentifier attribute inclusion not conforming CABForum guidelines 1.6.9reported in 14 days
2019-10-21closed2019-11-07DigiCertfailure to reply to CPR in a timely mannerreported same day
2019-10-16closed2020-04-01DigiCertIncorrect EV jurisdiction of incorporation information
2019-10-11closed2020-06-05IdenTrustMissing Thumbprints for Intermediate CA certificates In Some Annual Audit Reportsreported in 3 days
2019-10-11closed2020-07-03AppleOCSP responders return responses with incorrect issuerreported in 8 days
2019-10-07closed2020-02-08CamerfirmaInvalid authorityKeyIdentifier, violating Mozilla Policy and RFC 5280reported same day
2019-10-07closed2019-11-25MicrosoftIssuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy
2019-10-07closed2020-11-19NetlockIssuance of intermediates after 2019-01-01 that do not comply with Mozilla Policyreported in 3 days
2019-10-07closed2019-11-02DigiCertIssuance of intermediates after 2019-01-01 that do not comply with Mozilla Policy or the BRsreported in 4 days
2019-10-07closed2020-01-24ActalisIssuance of intermediates after 2019-01-01 that do not comply with Mozilla Policyreported in 203 days
2019-10-03closed2020-03-27PKIoverheidNo BR Audit for Intermediate CAs technically capable of issuing TLS certsreported same day
2019-10-03closed2019-10-28FirmaprofesionalNo BR Audit for intermediate CA technically capable of issuing TLS certsreported same day
2019-09-24closed2020-01-22Camerfirmaaudit gap
2019-09-20closed2019-11-02E-TugraInvalid DER results in failure to comply with RFC 5280 - Violating string length limitreported in 1 day
2019-09-16closed2020-08-02DigiCert Unconstrained CAs missing auditsreported in 6 days
2019-09-13closed2019-11-02DigiCertEV JOI Issuereported in 15 days
2019-09-13closed2020-01-22Google Trust ServicesCRL handling of expired certificates not fully compliant with RFC 5280 Section 3.3reported in 28 days
2019-09-05closed2019-10-08TrustCorNon-audited intermediate certificates
2019-09-03closed2020-07-29LuxTrustOutdated audit statement for intermediate certificate
2019-09-03closed2019-10-06Telekom SecurityIssue with Organization fieldreported in 4 days
2019-08-30closed2020-01-22GoDaddyIssues with State and Country fieldsreported in 11 days
2019-08-27closed2019-10-22DigiCertOCSP services returns 1 bytereported same day
2019-08-27closed2020-01-23Let's Encrypt2019.08.20 Incident: Incorrect OCSP responses under certain conditionsreported in 7 days
2019-08-23closed2020-01-17DigiCert N/A in EV serialNumber fieldreported in 4 days
2019-08-23closed2019-09-26SECOMMis-issued EV Certificatesreported in 4 days
2019-08-23closed2020-11-13DigiCertJOI Issuereported in 4 days
2019-08-22closed2021-01-27GlobalSignSSL Certificates with US country code and invalid State/Provreported in 2 days
2019-08-21closed2020-10-20CamerfirmaGovern d'Andorra auditsreported in 23 days
2019-08-20closed2019-10-18AppleApple: Unconstrained intermediate CAs not included in WTBR reportreported in 26 days
2019-08-19closed2020-09-09SectigoEV SSL Certificates with incorrect subject details.reported in 3 days
2019-08-16closed2019-09-05Amazon Trust ServicesRevoked Sample Certs - No SANsreported in 10 days
2019-08-14closed2020-02-02DigiCertQualified 2019 Audit Statements
2019-08-13closed2019-10-22CIBGCIBG insufficient serial number entropyreported in 158 days
2019-08-11closed2019-10-04NetlockFailure to provide regular and timely incident updatesreported in 1 day
2019-08-07closed2020-01-22GoDaddycross certificate disclosure to CCADBreported in 6 days
2019-07-29closed2019-12-09SwissSignMisissuance of Leaf Certificates because of incorrect postcodereported in 4 days
2019-07-26closed2019-08-10Amazon Trust ServicesNo Space In Private Organizationreported in 7 days
2019-07-23closed2019-12-13TrustCorIncorrect CA-Issuers URIreported in 1 day
2019-07-20closed2019-09-16EntrustSHA-1 Issuance and other misissuance while testingreported in 16 days
2019-07-19closed2019-12-03D-Trustincorrectly formatted businessCategory entryreported same day
2019-07-19closed2019-12-27Telekom Security"Some-State" comparable issuesreported in 4 days
2019-07-18closed2019-08-09Asseco (Certum)inconsistent disclosure of externally-operated intermediate
2019-07-18closed2020-01-23GoDaddyinconsistent disclosure of externally-operated intermediate
2019-07-18closed2019-09-16Sectigoinconsistent disclosure of externally-operated intermediate
2019-07-16closed2019-09-17Asseco (Certum)Overdue Audit Statements 2019
2019-07-12closed2019-08-13CFCAMissed annual CPS update publication on website in 2018
2019-07-11closed2021-03-07TeliaQualified BR Audit Statement
2019-07-06closed2019-08-10DigiCertuse of Organisationidentifier field in EV (Pre CABF Ballot SC17)reported in 30 days
2019-07-05closed2019-09-17D-TrustPrecertificate OU > 64 Charactersreported same day
2019-07-04closed2021-04-07SectigoFailure to provide timely incident reportsreported same day
2019-07-04closed2019-07-22TeliaFailure to disclose Unconstrained Intermediate within 7 Daysreported same day
2019-07-04closed2019-09-15SECOMFailure to disclose Unconstrained Intermediate within 7 Daysreported same day
2019-07-04closed2020-02-01DigiCertFailure to disclose Unconstrained Intermediate within 7 Daysreported same day
2019-06-24closed2019-12-24EntrustCertificate issued with validity greater than 825-daysreported in 3 days
2019-06-17closed2020-11-09IzenpeMultiple invalid EV certificates issuedreported same day
2019-06-14closed2019-09-05EntrustCertificate Issued with Incorrect Country Codereported in 1 day
2019-06-11closed2020-02-01SwissSignCP/CPS certificate profile issuereported in 28 days
2019-06-05closed2019-08-03Intesa SanpaoloIntesa Sanpaolo misissued certificatesreported in 595 days
2019-06-05closed2019-11-26DigiCertValidation Scope Incidentreported in 7 days
2019-06-05closed2019-12-24AppleApple: Non-compliant Common Name Lengthreported in 15 days
2019-06-04closed2019-12-14InfoCertInfocert misissued certificatesreported in 480 days
2019-05-24closed2019-08-10GlobalSignSPKI lacks explicit NULL parameter,reported in 3 days
2019-05-23closed2019-06-04Certinomisroots distrusted by Mozilla
2019-05-17closed2019-08-11GlobalSign4 Misissued certificates with invalid CNreported same day
2019-05-17closed2019-06-28EntrustQuestion marks in certificate O and L fieldsreported in 316 days
2019-05-14closed2019-05-23Certinomis174 certificates with unknown OCSP status
2019-05-14closed2019-07-24certSIGN"Some-State" in stateOrProvinceNamereported in 3 days
2019-05-14closed2019-07-24SecureTrust"Some-State" in stateOrProvinceNamereported in 3 days
2019-05-14closed2020-07-06Telia"Some-State" in stateOrProvinceNamereported in 3 days
2019-05-14closed2019-07-03Telekom Security"Some-State" in stateOrProvinceNamereported in 1 day
2019-05-14closed2019-07-01Kamu SM"Some-State" in stateOrProvinceNamereported in 1 day
2019-05-14closed2019-06-25SwissSign"Some-State" in stateOrProvinceNamereported in 1 day
2019-05-14closed2019-09-06DigiCert"Some-State" in stateOrProvinceNamereported in 3 days
2019-05-14closed2020-03-22Sectigo"Some-State" in stateOrProvinceNamereported in 3 days
2019-05-13closed2019-05-23Certinomiscertificates with invalid DNS SAN
2019-05-10closed2020-05-22DigiCertCAA Checking Issuereported in 11 days
2019-05-09closed2019-07-18Asseco (Certum)commonName not from subjectAltName entriesreported in 1 day
2019-05-07closed2020-01-21CamerfirmaOutdated audit statements for intermediate certsreported same day
2019-05-03closed2019-06-28SSL.comCRL not found - SSL.com-Enterprise-Intermediate-EV-RSA-4096-R1.crl
2019-05-03closed2019-08-06DigiCertRevoked intermediate certificates not in CRLreported same day
2019-05-02closed2019-05-20VerizonVerizon: "Default City" in Subject:localityNamereported same day
2019-05-02closed2019-08-10SECOM"Default City" in Subject:localityName
2019-05-02closed2019-12-09Sectigo"Default City" in Subject:localityNamereported same day
2019-04-29closed2019-09-15GlobalSignAT&T SSL certificates without the AIA extensionreported in 13 days
2019-04-24closed2019-08-11SecureTrustUnvalidated domain in certificatereported in 1 day
2019-04-23closed2019-08-11GDCAAuthentication of Organization Identity Failure for an OV Certificatereported in 4 days
2019-04-17closed2019-09-18SectigoMissing Changelog in CPSreported same day
2019-04-16closed2019-05-23Certinomiscertificates for an unregistered domain, with unknown OCSP status
2019-04-16closed2019-07-13SECOMcertificate for which “L” and “ST” not setreported in 41 days
2019-04-16closed2019-08-11SECOMcertificate for which “OU=-”reported in 69 days
2019-04-15closed2019-08-11FNMTFindings in 2019 Audit Statement, including domain validation methods, CAA, etc.reported in 66 days
2019-04-08closed2019-05-07CertinomisInvalid SAN in a certificatereported in 3 days
2019-04-05closed2019-05-23CertinomisInvalid TLD in SAN
2019-04-05closed2019-05-01E-TugraInsufficient serial number entropyreported in 33 days
2019-04-04closed2019-08-11IdenTrustFailure to disclose Unconstrained intermediate Within 7 Daysreported in 7 days
2019-04-02closed2019-06-28AtosInsufficient Serial Number Entropyreported in 15 days
2019-03-29closed2019-04-15WISeKeyInsufficient Serial Number Entropyreported in 23 days
2019-03-27closed2019-05-07Certinomiscertificates with space in dNSName SAN
2019-03-27closed2019-05-17SECOMInsufficient Serial Number Entropyreported in 20 days
2019-03-27closed2019-06-28BuypassInsufficient Serial Number Entropyreported in 6 days
2019-03-26closed2019-05-14Kamu SMInsufficient Serial Number Entropyreported in 749 days
2019-03-25closed2019-04-22Consorci AOCEC-SECTORPUBLIC insufficient serial number entropyreported in 10 days
2019-03-25closed2020-01-13FirmaprofesionalAC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropyreported in 10 days
2019-03-20closed2019-06-29GDCAInsufficient Serial Number Entropyreported in 12 days
2019-03-20closed2019-04-08Virginia TechVirginia Tech Insufficient Serial Number Entropyreported in 1 day
2019-03-18closed2019-03-29EntrustAffirmTrust Issuing CA Impacted by EJBCA Serial Number Issuereported in 5 days
2019-03-18closed2019-07-23ACCVInsufficient serial number entropyreported in 6 days
2019-03-16closed2019-04-24AT&TAT&T Insufficient Serial Number Entropyreported in 3 days
2019-03-16closed2019-12-03PKIoverheidKPN Insufficient Serial Number Entropyreported in 8 days
2019-03-16closed2019-06-28TWCA Invalid SAN Entriesreported in 3 days
2019-03-15closed2019-04-19HARICAwrong characters in NC extension of Technically Constrained Intermediate CA Certificatesreported in 9 days
2019-03-15closed2019-06-27EntrustIssued Certificates to incorrect Organizationreported in 8 days
2019-03-15closed2019-03-29HARICAInsufficient serial number entropy
2019-03-12closed2019-07-29DFN-PKI40 OV certificates with wrong STreported in 6 days
2019-03-12closed2019-03-30SiemensInsufficient serial number entropy
2019-03-11closed2019-08-11MULTICERTMulticert SSL CA 001: Insufficient serial number entropyreported same day
2019-03-11closed2019-08-09ActalisInsufficient serial number entropyreported in 8 days
2019-03-10closed2019-04-11SSL.comInsufficient serial number entropyreported in 5 days
2019-03-10closed2019-04-18SSL.comP-384 curve / ecdsa-with-SHA256 certificatesreported in 13 days
2019-03-08closed2020-01-24GoDaddyInsufficient serial number entropyreported in 1 day
2019-03-08closed2019-07-20AppleApple: Non-compliant Serial Numbersreported in 3 days
2019-03-06closed2019-07-15Google Trust Services63 bit serial numbers in some certificatesreported in 7 days
2019-03-05closed2020-08-07CFCAWrong SerialNumber encodingreported in 273 days
2019-03-04closed2020-11-11Chunghwa TelecomTest certificate with unregistered domain namereported in 17 days
2019-03-04closed2019-06-28CFCAInvalid TLD in SANreported in 4 days
2019-03-04closed2019-03-15TrustCorInsufficient Serial Number Entropyreported in 7 days
2019-03-04closed2020-01-18CamerfirmaUnrevocation of MULTICERT SSL Certification Authority 001 certificatereported in 13 days
2019-03-03closed2020-05-21CFCAO > 64 charactersreported in 1 day
2019-03-03closed2019-08-11SECOMCrossTrust: OU > 64 charactersreported same day
2019-03-01closed2019-07-01DigiCertin-addr.arpa Misissuancereported in 3 days
2019-03-01closed2019-04-26DarkMatterDarkMatter Insufficient Serial Number Entropyreported in 7 days
2019-02-27closed2019-04-22HARICAP-384,ecdsa-with-SHA256 Certificatesreported in 2 days
2019-02-26closed2019-08-11Telekom SecurityInvalid SAN Entriesreported in 83 days
2019-02-26closed2019-04-26DigiCert IPaddress in DNSname SANreported same day
2019-02-15closed2019-03-04IzenpeOU > 64 charactersreported in 1 day
2019-02-15closed2019-06-28TeliaMisissued certificate - Invalid OU value "-"reported in 7 days
2019-02-15closed2019-07-03TeliaMisissued certificate - Invalid wildcard formatreported in 7 days
2019-02-15closed2019-08-11TeliaMisissued certificate - FQDN without domain part (e_dnsname_not_valid_tld)reported in 7 days
2019-02-15closed2019-08-11Teliamisissued certificate - FQDN value incorrectly in SAN rfc822 fieldreported in 7 days
2019-02-12closed2019-07-18DigiCertP-384,ecdsa-with-SHA512 Certificatesreported in 1 day
2019-02-08closed2019-04-25DigiCertMissed Underscore Certificate Revocationsreported in 7 days
2019-02-07closed2019-07-01IdenTrustDiscrepancy in values of address fields within CN of SSL Certificatesreported in 3 days
2019-02-06closed2019-03-04Amazon Trust ServicesTest revoked certificates with invalid validity periodreported in 5 days
2019-02-03closed2019-02-22DigiCertIP in dnsNamereported in 5 days
2019-02-03closed2019-02-21GlobalSignIP in dnsNamereported in 5 days
2019-02-03closed2019-03-01EntrustIP in dnsNamereported in 5 days
2019-02-03closed2019-05-17DigiCertIP in dnsNamereported in 5 days
2019-02-03closed2019-09-10Camerfirmafailure to revoke underscoresreported in 5 days
2019-02-03closed2019-02-21SECOMfailure to revoke underscoresreported in 5 days
2019-02-03closed2019-12-24GoDaddyfailure to revoke underscoresreported in 5 days
2019-02-02closed2020-02-06CFCAinvalid dnsNamesreported in 5 days
2019-02-02closed2019-08-03Sectigoinvalid dnsNamereported in 8 days
2019-02-01closed2019-06-28Teliainvalid IP value in SAN DNS fieldreported in 3 days
2019-02-01closed2019-03-29SECOMcertificate for .test TLDreported same day
2019-02-01closed2019-05-14Certinomisinvalid CDP extensionreported in 1 day
2019-02-01closed2019-05-23Certinomisvalidity period >825 days
2019-02-01closed2019-05-23Certinomismisissued test certificates
2019-01-31closed2019-07-01Asseco (Certum)Invalid dnsNamesreported in 1 day
2019-01-31closed2019-04-08CFCAInternal iPAddress in certificatereported in 3 days
2019-01-30closed2019-05-23Certinomistest certificates, O=POUR TEST in subjectreported same day
2019-01-30closed2019-05-23Certinomisinvalid state and locality fields in subjectreported same day
2019-01-30closed2019-05-23Certinomisinvalid DNS names in SAN
2019-01-30closed2019-06-28TeliaMisissued certificate - invalid dnsNamereported in 5 days
2019-01-29closed2019-02-20ActalisNon BR Compliant OCSP Responderreported same day
2019-01-29closed2019-04-04DigiCertGood OCSP Responses for Revoked Intermediatesreported in 2 days
2019-01-28closed2020-02-05GRCAMisissued certificates - invalid CN, bad validity period, missing extensions
2019-01-27closed2019-09-16KIRMisissuance - missing OCSP AIA, Validity > 825 daysreported in 13 days
2019-01-25closed2019-06-29Google Trust ServicesImproper OCSP response for intermediate certificatereported in 14 days
2019-01-22closed2019-04-26DigiCert BR Error - san dns name starts with periodreported same day
2019-01-21closed2019-02-01EntrustLate revocation of underscore certificatereported in 3 days
2019-01-15closed2019-12-24Hongkong PostFailure to report misissuancereported in 181 days
2019-01-11closed2019-05-01DigiCertUnderscores - Intuitreported in 53 days
2019-01-10closed2019-02-20QuoVadisRecap of BR Compliance in 2018 issuance by external subCAs
2019-01-10closed2019-04-26QuoVadisMultiple unreported misissuances in 2018reported in 319 days
2019-01-08closed2019-02-19Asseco (Certum)Use of forbidden subjectPublicKeyInfo algorithmreported same day
2019-01-08closed2019-01-15DigiCertUse of forbidden subjectPublicKeyInfo algorithmreported same day
2019-01-08closed2019-08-10SectigoUse of forbidden subjectPublicKeyInfo algorithmreported same day
2019-01-03closed2019-05-01DigiCertUnderscores - Citireported in 120 days
2018-12-28closed2019-05-01DigiCertUnderscores - Ericssonreported in 114 days
2018-12-27closed2019-02-26DigiCertUnderscores - Canadian Imperial Bank of Commercereported in 113 days
2018-12-27closed2019-03-03DigiCertUnderscores - Verizonreported in 113 days
2018-12-26closed2019-02-14DigiCertUnderscores - Discover
2018-12-20closed2019-02-11DigiCertUnderscores - CVS Pharmacyreported in 106 days
2018-12-05closed2019-02-02MicrosecValidity period greater than 825 daysreported in 6 days
2018-12-04closed2019-05-15EntrustCertificate issued with '-' in ST fieldreported in 14 days
2018-11-30closed2018-12-19Asseco (Certum)Corrupted certificatesreported in 20 days
2018-11-23closed2019-02-20D-Trustsyntax error in one tls certificatereported in 11 days
2018-11-21closed2019-04-16MULTICERTMULTICERT certificates with a validity period greater than 825 daysreported in 5 days
2018-11-16closed2019-01-02ACCVLate Audit Statement
2018-11-12closed2019-05-20SwissSignMisissuance of Intermediate Certificates because of incorrect organizationIdentifierreported in 3 days
2018-10-31closed2018-11-01WISeKeyFailure to disclose intermediate in CCADB
2018-10-30closed2019-05-23Certinomisemail address in DNS SANreported same day
2018-10-29closed2020-05-27MULTICERTMULTICERT Misissuance and missing auditsreported same day
2018-10-19closed2018-11-16DigiCertInternal Domain Name cert mis-issuancereported in 3 days
2018-10-19closed2019-01-04IdenTrustInternal names / failure to reportreported in 239 days
2018-10-17closed2018-11-01DigiCertUndisclosed CAs -Federated Trust CA-1reported in 37 days
2018-10-12closed2019-01-29Telekom SecurityImproperly encoded QCStatements extensionreported in 10 days
2018-10-11closed2019-01-04CerticamaraFailure to respond to September 2018 CA Survey
2018-10-09closed2018-11-01SECOMUndisclosed intermediate certificatesreported same day
2018-10-09closed2019-01-04DocuSign (Keynectis)Undisclosed Intermediate certificate
2018-10-04closed2020-06-20Consorci AOCQualified audit statements
2018-10-03closed2019-05-23Certinomistest certificate for test.com, O=Entreprise TESTreported same day
2018-10-01closed2019-05-23CertinomisUnqualified Domain Name in SANreported in 4 days
2018-10-01closed2019-07-18Asseco (Certum)Unallowed key usage for EC public key (Key Encipherment)reported same day
2018-10-01closed2019-02-02FNMTOU exceeds 64 charactersreported same day
2018-10-01closed2019-09-16KIRCertificates issued with multiple BR violationsreported same day
2018-09-24closed2018-10-12QuoVadisimproper countryName formatreported in 3 days
2018-09-18closed2019-09-16ComodoFailure to revoke within 24 hoursreported in 1 day
2018-08-27closed2018-10-12Let's EncryptOCSP "unauthorized" responsesreported in 4 days
2018-08-24closed2018-10-03VisaQualified Audit Statements
2018-08-22closed2019-01-04CertignaIssuance without respecting CAA records
2018-08-20closed2018-08-30DigiCert*.sslsimplified.com compromised private key
2018-08-20closed2019-01-04GoDaddyRandom Value Vulnerability in Domain Validation Methodreported in 7 days
2018-08-15closed2018-11-16DigiCertimproper use of domain validation methodreported in 8 days
2018-08-15closed2018-09-28DigiCertpublished expired CRLs
2018-08-08closed2019-04-16MULTICERTMULTICERT organizationName Too Longreported in 5 days
2018-08-03closed2018-08-30Comodolocalhost.megasyncloopback.mega.nz compromised private key
2018-07-27closed2019-01-04CamerfirmaQualified Audit Statements
2018-07-12closed2019-02-06TeliaQualified Audit Statements
2018-07-06closed2018-08-31SwissSignDomain validated certificate but with stateOrProvinceNamereported same day
2018-06-29closed2019-01-09QuoVadisCertificate containing Debian weak keyreported in 48 days
2018-06-13closed2019-12-31Freistaat BayernNon-BR-compliant Key Usagereported in 1 day
2018-06-07closed2018-06-27GDCAMisissuance of certificates with small RSA keysreported same day
2018-06-01closed2019-02-20Cybertrust Japanthree test websites not provided
2018-05-30closed2018-07-17DigiCertInvalid Country Code Issuancereported in 13 days
2018-05-25closed2018-06-15SwisscomMissing Audits for Unconstrained Intermediate Certificates
2018-05-24closed2020-10-05GRCAMisissued certificates: Invalid commonName, commonName not in SANreported in 17 days
2018-05-19closed2019-01-09GoDaddyImproper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableStringreported in 1 day
2018-05-18closed2019-02-20E-TugraImproper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString
2018-05-18closed2018-05-24Let's EncryptCase-sensitive CAA tag processing
2018-05-17closed2019-10-04NetlockCN not in SANreported same day
2018-05-14closed2019-01-04ComodoMisissuance using "CNAME CSR Hash 2" method of domain control validationreported same day
2018-05-07closed2018-10-19SwissSignCertificate issue with Signaturereported same day
2018-04-30closed2018-05-23FirmaprofesionalMissing BR Self Assessment
2018-04-30closed2018-05-23ACCVMissing BR Self Assessment
2018-04-30closed2019-01-04DocuSign (Keynectis)Missing BR Self Assessment
2018-04-24closed2019-09-15DigiCertIssues with DN, country code and keyUsagereported in 39 days
2018-04-18closed2018-08-08CamerfirmaMissing audit for Intermediate certificate
2018-04-18closed2018-11-01SwissSignUndisclosed Intermediate Certificates
2018-04-09closed2018-12-14SECOMTSA Certs Issued from Rootreported same day
2018-04-05closed2018-10-12TeliaIntermediate Cert(s) Not Disclosed in CCADB
2018-04-05closed2018-10-12DigiCertIntermediate Cert(s) not disclosed in CCADB
2018-04-05closed2018-04-10CertignaIntermediate Cert(s) not disclosed in CCADB
2018-04-04closed2018-04-06ABBgreater than 825 day cert issuancereported in 19 days
2018-04-04closed2018-05-30Asseco (Certum)EV certificate mis-issuereported same day
2018-03-27closed2018-04-20E-TugraValidity period > 825 days
2018-03-26closed2019-05-15EntrustIP Address in dNSName formreported in 4 days
2018-03-20closed2018-06-03DigiCertOnion Certsreported in 11 days
2018-03-15closed2018-08-13IdenTrustImproper encoding of wildcard certificatereported in 213 days
2018-03-15closed2018-03-23Let's EncryptImproper encoding of wildcard certificatesreported in 2 days
2018-03-15closed2018-03-30Cybertrust JapanMis-issuance of certificate with https in CN/SANreported in 2 days
2018-03-09closed2019-01-03DocuSign (Keynectis)Non-Compliant Technically Constrained Intermediatesreported in 107 days
2018-03-07closed2018-05-17CamerfirmaNon-BR-Compliant Issuance - DNSName is empty
2018-03-07closed2018-10-19SwissSignCert issued with a to long validity periodreported in 1 day
2018-02-17closed2018-05-30E-TugraFailure to respond to January 2018 survey
2018-02-17closed2018-05-24TurkTrustFailure to respond to January 2018 survey
2018-02-17closed2018-05-24CertinomisFailure to respond to January 2018 survey
2018-02-17closed2018-02-26GoDaddyFailure to respond to January 2018 survey
2018-02-06closed2018-08-22Government of PortugalSCEE / Justica: Non-BR-Compliant Certificate Issuancereported in 11 days
2018-02-05closed2018-02-20Asseco (Certum)Non-BR-Compliant Issuance - Debian Weak Keysreported in 2 days
2018-01-25closed2018-01-31Asseco (Certum)certificate issued by Certum with compromised private key not revoked (windows10.microdone.cn)reported same day
2018-01-17closed2018-05-24CamerfirmaNon-BR-Compliant Issuance - Non-printable characters in OU fieldreported same day
2018-01-16closed2018-02-28Swiss BIT (FOITT)Non-BR-Compliant issuance --improper characters in DNSName (BIT sub-CA)reported in 26 days
2018-01-11closed2018-06-14DigiCertBR 3.2.5 Validation of Authority Failure for OV Certsreported in 12 days
2018-01-08closed2018-01-26EntrustNon-BR-Compliant OCSP Responderreported same day
2018-01-08closed2019-01-14SwissSignInvalid DNSName in SANreported in 1 day
2018-01-08closed2018-01-09Consorci AOCProblem reporting mechanism for Consorci AOC points to URL with invalid cert
2017-12-25closed2018-01-31DigiCertlocalbattle.net certificate with private key in software / issued by Digicert
2017-12-19closed2018-04-12TrustisNon-Br-Compliant OCSP Responderreported same day
2017-12-19closed2018-06-27TeliaNon-BR-Compliant OCSP Responderreported same day
2017-12-19closed2018-01-16QuoVadisNon-BR-Compliant OCSP Responderreported in 8 days
2017-12-19closed2018-01-04CamerfirmaNon-BR-Compliant OCSP Respondersreported in 7 days
2017-12-18closed2018-01-04Telekom SecurityNon-BR-Compliant OCSP Respondersreported in 7 days
2017-12-18closed2018-01-16CertinomisNon-BR-Compliant OCSP Responders
2017-12-18closed2019-01-03Consorci AOCInsufficient Audit Statements
2017-12-06closed2017-12-20ComodoCAA misissuances due to race conditionreported in 5 days
2017-11-29closed2017-12-05MicrosoftMicrosoft shares wildcard certificates among cloud instancesreported same day
2017-11-27closed2018-01-17CamerfirmaPotential Mis-Issuance based on CAA records
2017-11-27closed2018-07-18Asseco (Certum)CAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN
2017-11-27closed2017-12-06ComodoCAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN
2017-11-17closed2017-11-17ComodoMcAfee, McAfee Client/Email CA, Certificate signature algorithm does not match TBS signature algorithm
2017-11-17closed2017-11-17ComodoCertificação Digital, SSL Blindado PRO EV, Certificate signature algorithm does not match TBS signature algorithm
2017-11-17closed2017-11-17ComodoEUNETIC, EuropeanSSL Extended Validation Server CA, Certificate signature algorithm does not match TBS signature algorithm
2017-11-17closed2017-11-17ComodoUSERTrust, USERTrust ECC Certification Authority, Certificate signature algorithm does not match TBS signature algorithm
2017-11-17closed2017-11-17ComodoCOMODO CA, COMODO ECC Certificate Authority, Certificate signature algorithm does not match TBS signature algorithm
2017-11-16closed2017-11-28DigiCertInsufficient entropy in serial numbersreported in 15 days
2017-11-02closed2017-11-28DigiCertEV JOI Issuereported in 105 days
2017-10-30closed2018-01-09FirmaprofesionalInsufficient Audit Statementsreported same day
2017-10-23closed2018-05-23ComodoCAA Mis-Issuance on basic test casereported in 10 days
2017-10-18closed2019-01-03Asseco (Certum)CAA Mis-Issuance on CNAME pointing directly to restrictive CAA recordreported in 2 days
2017-10-18closed2017-11-28Asseco (Certum)CAA mis-issuance on critical flag and unknown CAA tag
2017-10-18closed2017-11-28WoSignCAA Mis-Issuance on CNAME pointing directly to restrictive CAA record
2017-10-18closed2018-02-09SymantecRapidSSL CAA Mis-Issuance: Lookup failure on DNSSEC-signed zonereported in 5 days
2017-10-16closed2020-06-15Symantecroots distrusted by Mozilla
2017-10-04closed2017-10-07SecureTrustCerts issued with same issuer and serial number
2017-10-04closed2018-01-18ActalisCerts issued with same issuer and serial number
2017-10-04closed2017-10-13CamerfirmaCerts issued with same issuer and serial number
2017-09-29closed2017-10-12SwissSignTwo certs issued with same issuer and serial numberreported in 323 days
2017-09-27closed2017-11-17Procertroots distrusted by Mozilla
2017-09-20closed2018-01-18DFN-PKIcablint findings, follow up to T-Systems Bug 1391074reported in 34 days
2017-09-19closed2018-02-06DigiCertMis-Issuance Rekey certificatesreported in 5 days
2017-09-19closed2017-10-16NetlockNon-BR-Compliant Certificate Issuance -- * in not the leftmost position in dnsNamereported in 17 days
2017-09-10closed2017-09-14ComodoCAA Misissuancereported in 1 day
2017-09-09closed2017-11-03DigiCertCAA Misissuancesreported same day
2017-09-09closed2017-09-21Let's EncryptCAA Misissuancesreported same day
2017-09-08closed2018-06-21DigiCertNon-BR-Compliant OCSP Responders
2017-09-08closed2018-05-23VisaNon-BR-Compliant OCSP Responders
2017-09-08closed2018-03-02SECOMNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2017-10-11IzenpeNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2018-01-11IdenTrustNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2017-11-28KPNNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2019-01-03DocuSign (Keynectis)Non-BR-Compliant OCSP Responders
2017-09-08closed2018-10-12Consorci AOCNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2018-02-07certSIGNNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2018-05-23DisigNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2018-05-04FirmaprofesionalNon-BR-Compliant OCSP Respondersreported in 10 days
2017-09-08closed2017-11-28SK ID SolutionsNon-BR-Compliant OCSP Respondersreported same day
2017-09-08closed2018-02-05Intesa SanpaoloDouble dot charactersreported in 53 days
2017-09-07closed2017-09-20Swiss BIT (FOITT)CommonName not in SANsreported in 33 days
2017-09-07closed2017-12-12Wells FargoInvalid DNS namesreported in 43 days
2017-09-07closed2018-06-25Government of PortugalInvalid DNS namesreported in 25 days
2017-09-07closed2018-04-25DigiCertSeveral Problemsreported in 33 days
2017-09-07closed2017-09-20DigiCertMetadata in OU fieldsreported in 29 days
2017-09-07closed2019-01-14Cybertrust JapanMetadata in OU fields, Reserved IP Addressreported in 29 days
2017-09-07closed2017-09-18SiemensInsufficient Serial Number Entropy
2017-09-07closed2017-10-13InfoCertInsufficient Serial Number Entropyreported in 28 days
2017-09-07closed2017-11-28GRCASigning SHA-1 OCSP responses with unconstrained certificate
2017-09-07closed2017-10-17EDICOMSigning SHA-1 OCSP responses with unconstrained certificate
2017-08-24closed2017-11-22AT&TNon-BR-Compliant Certificate Issuance -- RSA key smaller than 2048 bits
2017-08-24closed2017-11-22GlobalSignNon-BR-Compliant Certificate Issuance -- double-dots in dnsNamereported same day
2017-08-19closed2017-08-21Let's EncryptNon-BR-Compliant Certificate Issuancereported in 9 days
2017-08-19closed2017-08-22DigidentityNon-BR-Compliant Certificate Issuancereported in 30 days
2017-08-17closed2017-12-01GoDaddyNon-BR-Compliant Certificate Issuancereported in 30 days
2017-08-16closed2017-11-28WISeKeyNon-BR-Compliant Certificate Issuancereported in 11 days
2017-08-16closed2018-10-03VisaNon-BR-Compliant Certificate Issuancereported same day
2017-08-16closed2019-01-24Telekom SecurityNon-BR-Compliant Certificate Issuancereported in 28 days
2017-08-16closed2019-01-03TWCANon-BR-Compliant Certificate Issuance
2017-08-16closed2018-02-09SymantecNon-BR-Compliant Certificate Issuancereported in 372 days
2017-08-16closed2017-11-30SwissSignNon-BR-Compliant Certificate Issuancereported in 9 days
2017-08-16closed2018-02-09SECOMNon-BR-Compliant Certificate Issuancereported same day
2017-08-16closed2018-10-12QuoVadisNon-BR-Compliant Certificate Issuancereported in 21 days
2017-08-16closed2018-02-09NetlockNon-BR-Compliant Certificate Issuancereported in 42 days
2017-08-16closed2017-12-01MicrosecNon-BR-Compliant Certificate Issuancereported in 10 days
2017-08-16closed2018-01-15IzenpeNon-BR-Compliant Certificate Issuancereported in 10 days
2017-08-16closed2017-10-13IdenTrustNon-BR-Compliant Certificate Issuancereported in 7 days
2017-08-16closed2017-08-24Kamu SMNon-BR-Compliant Certificate Issuancereported same day
2017-08-16closed2017-09-05GlobalSignNon-BR-Compliant Certificate Issuance - metadata-only subject fieldsreported in 525 days
2017-08-16closed2017-12-01EntrustNon-BR-Compliant Certificate Issuancereported in 7 days
2017-08-16closed2017-12-01DocuSign (Keynectis)Non-BR-Compliant Certificate Issuancereported in 8 days
2017-08-16closed2018-02-09DisigNon-BR-Compliant Certificate Issuancereported same day
2017-08-16closed2019-04-02D-TrustNon-BR-Compliant Certificate Issuancereported in 42 days
2017-08-16closed2018-08-01Consorci AOCNon-BR-Compliant Certificate Issuancereported same day
2017-08-16closed2017-12-08ComodoNon-BR-Compliant Certificate Issuancereported in 11 days
2017-08-16closed2017-10-13certSIGNNon-BR-Compliant Certificate Issuancereported in 9 days
2017-08-16closed2017-11-29CertinomisNon-BR-Compliant Certificate Issuancereported in 10 days
2017-08-16closed2018-03-02CamerfirmaNon-BR-Compliant Certificate Issuancereported in 27 days
2017-08-16closed2017-09-20ActalisNon-BR-Compliant Certificate Issuancereported in 3 days
2017-08-10closed2017-09-20DigiCertCertificate Issues Identified on the Mailing Listreported in 1 day
2017-08-02closed2017-10-24CertinomisCross-signing of StartCom intermediate certs, and delay in reporting it in CCADBreported same day
2017-06-19closed2018-08-07SwissSignBRs require full annual audits
2017-06-01closed2017-10-09WoSignmis-issuance of certs with unvalidated domain names and bogus field values
2017-06-01closed2017-09-21WoSign'un-revoking' intermediate certificates
2017-05-26closed2017-08-18SymantecNon-audited, non-technically-constrained intermediate certificate
2017-05-26closed2017-07-13DigiCertNon-audited, non-technically-constrained intermediate certificates
2017-05-26closed2017-10-13FirmaprofesionalNon-audited, non-technically-constrained intermediate certificates
2017-05-25closed2017-09-20TurkTrustNon-audited, non-technically-constrained intermediate certs
2017-04-17closed2017-10-13Camerfirmacerts with duplicate SANs and without localityName or stateOrProvinceNamereported in 3 days
2017-04-05closed2017-04-25TrustisSHA-1 serverAuth cert issued in November 2016
2017-04-05closed2017-05-18GlobalSignIncapsula issued a certificate for non-existing domain (testslsslfeb20.me)
2017-04-05closed2017-09-21DigiCertDigiCert issued cert with CN too longreported in 28 days
2017-03-25closed2017-04-20CamerfirmaStartcom are issuing by proxy using Camerfirma
2017-02-20closed2017-09-07GoDaddyAction Items
2017-02-14closed2017-03-22MicrosoftNon-BR Compliant Certificates - missing CP/CPS OID
2017-01-30closed2017-11-28VerizonVerizon mis-issued test certificates
2017-01-27closed2017-09-21SymantecMis-issued test certificates by CrossCert

Showing the newest 100 of 1,581 incidents.

Method

Every incident is a bug in Mozilla's CA Certificate Compliance component, or a Mozilla decision to distrust a CA's roots, reported from January 2017 through November 7, 2026. TLS only. Follow-up bugs, such as late-revocation bugs, fold into the incident they follow. A distrust that came out of one incident is that incident's row. A distrust that came out of a pattern of incidents gets its own row.

Certificates affected counts certificates still valid when the problem was reported, from the CA's own report. A CA's peak certificates is the most it has had in use at once. It's the largest of three figures: its biggest month in Cloudflare Radar's Certificate Transparency data (February 2025 on) or Let's Encrypt's own statistics, leaving out months when it reported a critical or high incident, since a mass replacement inflates them; a published figure from the CA, a root program, research, or the press; or the most still-valid certificates in one of its own incidents. Certificates under a sub-CA count for the root's CA and again for the sub-CA's operator. The peaks download lists each CA's figure and its source. Share of CA divides certificates affected by the CA's peak certificates, up to 100%. The per certificate rate, in the CA summary and the CA list, is a CA's incidents since 2017 per million peak certificates. It's a rough benchmark for comparing CAs, not a measured rate. It rates only CAs with a peak of at least 1,000 certificates and at least 5 incidents.

Critical means Mozilla distrusted a root, or a CA private key left the CA's control. High means a validation check was skipped or broken, or a CA certificate was issued wrong. Low means the problem was in the CA's own documents, audits, or disclosures. Everything else is Medium. Found by is whoever first found the problem, from the bug's timeline. Reported in runs from when the CA says it became aware to when the bug was filed, and CCADB's rules now ask for a report within 72 hours. Slow answers are questions put to the CA in its bug that waited more than 7 days for a reply.

Download the data: [ca-incidents-2026-11-07.csv] [ca-peaks-2026-11-07.csv] Free for noncommercial reuse with attribution (CC BY-NC 4.0).

Be ready for your CA's next incident

certkit-ssl-automation

When a CA gets something wrong, the certificates it issued have to be revoked within 5 days, and within 24 hours for some problems. A distrust can end trust in a whole root.

CertKit renews your certificates on its own, and when a CA moves the renewal window ahead of a revocation, it renews early. It works with any ACME CA, so switching CAs doesn't mean rebuilding your automation. It also checks the certificates on your servers, public or internal, for expiry, untrusted roots, and renewals that never got deployed.

Start free trial See how it works