DigiNotar certificate authority compromise

On 30 August 2011, the Dutch certificate authority DigiNotar confirmed that an attacker had penetrated its network and abused its trusted position in the global Public Key Infrastructure (PKI) to issue more than 500 fraudulent SSL/TLS certificates. The incident is a landmark in internet security: it demonstrated that the entire web's trust model could be subverted through a single compromised CA, and it ended with DigiNotar's bankruptcy within weeks.

What happened

DigiNotar was a small Dutch CA, acquired by VASCO Data Security in January 2011, that issued certificates trusted by every major browser. It also operated PKIoverheid, the certificate infrastructure underpinning much of the Dutch government's digital services.

According to the forensic investigation by Fox-IT (the "Operation Black Tulip" report), the outer perimeter of DigiNotar's network was breached on 17 June 2011. The intruder moved laterally — exploiting poor network segmentation, weak firewall rules, and out-of-date software — and reached the certificate-issuing servers by 1 July. The attacker ultimately gained control of all eight CA servers.

Between 10 and 20 July 2011, the intruder generated over 500 rogue certificates for high-value domains including a wildcard *.google.com, plus certificates impersonating Yahoo, Mozilla, Skype, Microsoft Update, the CIA, MI6, and Mossad.

Impact

• A fraudulent *.google.com certificate was used in man-in-the-middle attacks to wiretap the Gmail traffic of roughly 300,000 Iranian internet users — the attack's apparent real-world purpose.
• On 29 August 2011, Microsoft, Mozilla, Google, and Apple revoked trust in all DigiNotar root certificates. Because DigiNotar underpinned Dutch e-government, hospitals, courts, and financial services, the revocation crippled parts of the Dutch national infrastructure, forcing the government to take emergency operational control of the company.
• DigiNotar was declared bankrupt on 20 September 2011, less than a month after disclosure.

Attribution

A hacker using the alias "ComodoHacker" — who had compromised the Comodo CA months earlier in March 2011 — claimed responsibility, leaving a signature in a text file on DigiNotar's servers and posting messages framing the operation as retaliation. Investigators assessed the attacker was operating from Iran, and the targeting of Iranian Gmail users pointed strongly to state-aligned surveillance objectives.

Why it matters

DigiNotar is the defining case study in PKI fragility: trust in the web depends on hundreds of CAs, and the compromise of any one of them can undermine all of them. The incident directly accelerated industry reforms — most notably Certificate Transparency, public logs that make rogue certificate issuance detectable, and stricter CA/Browser Forum audit requirements. It remains the textbook example of why certificate authorities are among the highest-value targets on the internet.