CA Industry News

A daily digest of CA/Browser Forum posts and Mozilla CA Program incompliance cases.

Summaries are auto-generated. Check the original source linked on each item before acting on anything.

Updated: 2026-11-09, RSS

2026-11-09

INCIDENTopen

CFCA: Serial numbers do not contain at least 64 bits of CSPRNG output

Mozilla CA Program (Bugzilla)

INCIDENTopen

SHECA: CA Certificate Serial Numbers Generated Using a Non-Cryptographically Secure PRNG

Mozilla CA Program (Bugzilla)

2026-11-08

INCIDENTopen

DigiCert: A misleading official support article causes a lot of misconfigured _validation-contactemail DNS TXT records and fake TLS certificate(s)

Mozilla CA Program (Bugzilla)

2026-11-06

INCIDENTopen

eMudhra: Series A intermediates missing from 2024-25 audit reports

Mozilla CA Program (Bugzilla)

2026-11-05

INCIDENTopen

GlobalSign: Mark Certificate missing subject:jurisdictionLocalityName field

Mozilla CA Program (Bugzilla)

2026-11-04

INCIDENTopen

Buypass: cRLNumber reused across Root CA CRLs

Mozilla CA Program (Bugzilla)

2026-11-03

INCIDENTopen

SSL.com: Timestamp Certificate private keys used more than 15 months after notBefore

Mozilla CA Program (Bugzilla)

INCIDENTopen

D-Trust: EV TLS certificates missing subject attributes required by CSM CPS section 3.1.4

Mozilla CA Program (Bugzilla)

INCIDENTopen

Sectigo: Mismatch between organizationIdentifier and jurisdictionStateOrProvince

Mozilla CA Program (Bugzilla)

2026-11-02

INCIDENTopen

NETLOCK: Arany (Class Gold) root CRL entry for subordinate CA certificate without reasonCode

Mozilla CA Program (Bugzilla)

INCIDENTopen

Atos: Failure to respond to Certificate Problem Report within 24 hours

Mozilla CA Program (Bugzilla)

INCIDENTopen

SECOM: Insufficient randomness in serial numbers of two Cybertrust Japan subordinate CA certificates

Mozilla CA Program (Bugzilla)

INCIDENTopen

TWCA: Subscriber certificate serial numbers have 63 bits of CSPRNG output instead of 64 bits

Mozilla CA Program (Bugzilla)

2026-11-01

INCIDENTopen

TWCA: EV certificates with jurisdiction fields not matching the registration agency level

Mozilla CA Program (Bugzilla)

2026-10-31

INCIDENTopen

HARICA: 2 truncated CRLs published

Mozilla CA Program (Bugzilla)

2026-10-28

BALLOT

Ballot SC105: Remove High Risk language from TLS BR and EVG

CA/Browser Forum

2026-10-05

BALLOT

Ballot SMC020: Remove Requirement to Record BR Version of Validation Method

CA/Browser Forum

2026-09-03

BALLOT

Ballot SC104: Set presence of AIA extension to SHOULD for Subscriber Certificates

CA/Browser Forum

2026-08-11

BALLOT

Ballot SMC018: Realignment of Multipurpose use cases

CA/Browser Forum

2026-08-06

BALLOT

Ballot SC100: DNSSEC Clarification and Consolidation

CA/Browser Forum