fix(enroll): UCC SANs never reached CERTInext — additionalDomains sent empty - #21

Merged

spbsoluble merged 14 commits into

hotfix/v1.0.1-sectigo-parity-pickupfrom

fix/v1.0.1-ucc-san-dnsname

Aug 13, 2026

Commits on Aug 12, 2026

fix(enroll): UCC SANs never reached CERTInext — additionalDomains sent empty
spbsoluble
committed
dfbfe80
docs(enroll): scope the CERTInext SAN measurements to the sandbox
spbsoluble
committed
5348f72
fix(enroll): address full-review round 1 — DCV strand, ASN.1 debris, log injection
spbsoluble
committed
f6fbc80
fix(enroll): address full-review round 2 — false pending-domain invariant, TXT leak
spbsoluble
committed
0caaa1b
fix(enroll): address full-review round 3 — never throw out of DCV staging, CSR fallback not union
spbsoluble
committed
7388e75
fix(enroll): address full-review round 4 — regex $ quirk, cancellation, CSR-fallback edge case
spbsoluble
committed
e7715c9
fix(enroll): address full-review round 5 — cancellation swallowed by RestSharp, unsanitized DomainName log
spbsoluble
committed
d69c4cd
fix(enroll): address full-review round 6 — cleanup reuses cancelled token, no correlation ID
spbsoluble
committed
8fb4e88
fix(enroll): address full-review round 7 — cleanup call unbounded, subject unsanitized in BuildSanList
spbsoluble
committed
8a3ac17
fix(enroll): address full-review round 8 — stale gateway count in log, cancellation swallows audit line
spbsoluble
committed
41a71ae
fix(enroll): address full-review round 9 — TXT cleanup unbounded in aggregate across domains
spbsoluble
committed
5d5e2b3

Commits on Aug 13, 2026