Because of the misinterpretation of Baseline Requirements for stateOrProvinceName field lot of CAs issued certificates with ST = Italy/France/etc. Now Firefox is forcing to reissue thousands of certificates in 5 days.