← D-TRUST cases
Bugzilla #1509512
Self Reported Incident
D-TRUST: syntax error in one tls certificate
RESOLVED
FIXED
D-TRUST
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
D-TRUST reported a syntax error in a TLS certificate issued on June 2, 2018, which contained an invalid character in the serial number field. The CA became aware of the issue on November 12, 2018, through a monitoring service. Following the discovery, D-TRUST engaged with the affected customer and took steps to avoid immediate revocation due to potential public harm. The CA implemented additional training and initiated software fixes to prevent future occurrences. All affected certificates have since been revoked, and the CA has committed to improving its reporting and auditing processes.
Chronology
- D-TRUST became aware of a syntax error in a TLS certificate.
- The problematic certificate was revoked by the customer.
Thread Activity
- Bdr representative — D-TRUST reported the syntax error incident and outlined their response timeline.
- Fastly representative — Inquired about the delay in detection of the problem.
- Community commenter — Requested an update on the software fix to prevent similar issues.
- Bdr representative — Confirmed that all affected certificates were revoked and discussed ongoing actions.
- Fastly representative — Noted that all remediation actions are complete.
Participants
Bdr representative
Fastly representative
Community commenter
External References
Similar Local Cases
D-TRUST: Precertificate OU > 64 Characters
D-TRUST: incorrectly formatted businessCategory entry
D-TRUST: Wrong key usage (Key Agreement)
D-TRUST: CRL not DER-encoded
D-Trust: CRL HTTP Media Type
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
Camerfirma: Invalid authorityKeyIdentifier - recurrent incident
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy