DigiCert: *.sslsimplified.com compromised private key

RESOLVED FIXED DigiCert

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

The case concerns a reported compromise of a private key associated with certificates for *.sslsimplified.com. The initial report was made by Hanno Böck, who reported the key compromise and that DigiCert confirmed it and revoked the certificate. The reporter requested that the issue be added to OneCRL. In the thread, DigiCert confirmed the certificate revocation and the certificate was subsequently added to OneCRL. The bug is marked RESOLVED with resolution FIXED. The thread includes references to certificate details and related discussion links.

Model: gpt-5.4-nano Generated: 2026-06-13 11:24 UTC Revised: 2026-06-16 18:55 UTC Confidence: 0.86 2 comments

Chronology

2018-08-20 Hanno Böck reported a private key compromise for a DigiCert certificate covering *.sslsimplified.com, and DigiCert confirmed the compromise and revoked the certificate.
2018-08-30 The revoked certificate was added to OneCRL.

Thread Activity

2018-08-20 Fastly representative — Wayne Thayer stated that Hanno Böck reported the key compromise, DigiCert confirmed it and revoked the certificate, and that it should be added to OneCRL.
2018-08-30 Fastly representative — Wayne Thayer said the certificate had been added to OneCRL.

Participants

Fastly representative Community commenter

External References

Original Bugzilla Case groups.google.com crt.sh crt.sh

Similar Local Cases

#1427034 RESOLVED Ca Security Vulnerability Security Incident Opened 2017-12-25 · Closed 2024-05-09 · 93% similar

DigiCert: localbattle.net certificate with private key in software / issued by Digicert

AI Summary CA Owner

#1942455 RESOLVED Revocation Issue Opened 2025-01-18 · Closed 2025-03-18 · 80% similar

DigiCert: inconsistent revocation / OCSP / CRL behavior

AI Summary CA Owner

#1650910 RESOLVED Self Reported Incident Audit Finding Revocation Issue Opened 2020-07-06 · Closed 2023-02-22 · 66% similar

DigiCert: Inconsistent EV audits

AI Summary CA Owner

#1320943 RESOLVED Revocation Issue Repository Issue Opened 2016-11-29 · Closed 2022-11-14 · 63% similar

Add revoked certificate Certification Authority of WoSign G2 issued by Certum CA root to OneCRL

AI Summary CA Owner

#1744795 RESOLVED Ca Security Vulnerability Security Incident Opened 2021-12-07 · Closed 2023-02-22 · 62% similar

DigiCert: Issuance of certs with weak keys (ROCA)

AI Summary CA Owner

#1649951 RESOLVED Self Reported Incident Revocation Issue Opened 2020-07-02 · Closed 2023-02-22 · 61% similar

DigiCert: Incorrect OCSP Delegated Responder Certificate

AI Summary CA Owner

#1675684 RESOLVED Ca Security Vulnerability Security Incident Opened 2020-11-06 · Closed 2023-02-22 · 61% similar

DigiCert: Private Keys Disclosed by Customers as Part of CSR

AI Summary CA Owner

#1794050 RESOLVED Ca Certificate Compliance Certificate Misissuance Revocation Issue Opened 2022-10-06 · Closed 2023-02-22 · 61% similar

DigiCert: Org information issue in new validation workflow

AI Summary CA Owner