Ragtime_Knoll5N

**Name of the Vulnerable Software and Affected Versions** SSL.com versions prior to 2025-04-19 **Description** The issue arises when domain validation method 3.2.2.4.14 is used, allowing a trusted TLS certificate to be issued for the domain name of a requester's email address, even if the requester does not have administrative control of that domain. **Recommendations** For versions prior to 2025-04-19, update to a version released after 2025-04-19 to resolve the issue. As a temporary workaround, consider restricting the use of domain validation method 3.2.2.4.14 until a patch is available.