← Apple Inc. cases
Bugzilla #1730291
Certificate Problem Report
Apple: Test website certificates expired
RESOLVED
FIXED
Apple Inc.
AI Summary
Apple CA's test website certificates expired due to an oversight in expiration notifications. The operations team was inadvertently removed from the notification email group, leading to a lack of alerts about the expiration. The issue was identified on September 9, 2021, and was resolved the same day by issuing new certificates. A monitoring solution has since been implemented to proactively check certificate statuses and alert the team 30 days prior to expiration.
Chronology
- Certificates for test web pages expired; issue identified and resolved.
- Monitoring application added to proactively monitor certificate expiration.
Participants
certification_authority@apple.com
matthias@thisisntrocket.science
bwilson@mozilla.com
External References
Similar Local Cases
Apple: EV Certificate Approver Authorization
Apple: Revocation Delay for TLS certificates issued outside the TTL of the CAA record
Apple: TLS certificates issued outside the TTL of the CAA record
Apple: Public Key Reuse
Apple: CRLs for dormant CAs will not be populated in CCADB
Apple: OCSP availability 2020-11-12
Apple: OCSP responders return ‘unknown’ for valid S/MIME and TLS certificates
Apple: OCSP responders return responses with incorrect issuer