Re: Certificates with subject locality "Default City"

2019-05-02 Thread Alex Cohn via dev-security-policy
On Thu, May 2, 2019 at 3:45 PM Nick Lamb wrote: > Alex, you say you "came across" these certificates, do you think it is > likely that there are many more, or was that in practice a fairly > thorough search? I've been adding certificates found in Censys scans to CT logs, and happened to spot

Re: Certificates with subject locality "Default City"

2019-05-02 Thread Wayne Thayer via dev-security-policy
Thank you for the report Alex. The following compliance bugs have been created: Sectigo: https://bugzilla.mozilla.org/show_bug.cgi?id=1548713 SECOM: https://bugzilla.mozilla.org/show_bug.cgi?id=1548714 DigiCert: https://bugzilla.mozilla.org/show_bug.cgi?id=1548716 - Wayne On Thu, May 2, 2019 at

Re: Certificates with subject locality "Default City"

2019-05-02 Thread Nick Lamb via dev-security-policy
On Thu, 2 May 2019 12:15:33 -0500 Alex Cohn via dev-security-policy wrote: > I came across a number of certificates issued by Sectigo, SECOM, and > DigiCert that list "Default City" as the subject's locality. Unless > there are actually localities named "Default City" that I'm unaware > of, it

Certificates with subject locality "Default City"

2019-05-02 Thread Alex Cohn via dev-security-policy
Hi all, I came across a number of certificates issued by Sectigo, SECOM, and DigiCert that list "Default City" as the subject's locality. Unless there are actually localities named "Default City" that I'm unaware of, it seems to me this is a violation of the BRs, sections 3.2.2.1 and 7.1.4.2.2.e.