Google Trust Services: Improper OCSP response for intermediate certificate

Google Trust Services reported an incident involving an improperly generated OCSP response for its intermediate certificate GTSY1. The issue was identified on January 11, 2019, when a serial number mismatch was discovered during preparations for the certificate's use. Although the incorrect response did not affect any subscribers or relying parties, the CA proactively disclosed the incident and outlined remediation steps. These included generating a correct OCSP response, configuring alerting for newly created subCAs, and improving procedures for generating subCAs. The incident was resolved with the necessary corrections implemented by January 30, 2019.

1. 2019-01-11 Serial number mismatch in OCSP response discovered
2. 2019-01-18 Correct OCSP response for GTSY1 published
3. 2019-01-30 Additional linters implemented to prevent future errors

1. 2019-01-25 Community commenter — Google Trust Services reported an incident related to OCSP generation.
2. 2019-01-29 Google representative — Details about the concerned CA GTSY1 and OCSP Responder URL provided.
3. 2019-01-30 Google representative — Confirmed that additional linters were implemented to catch similar errors.
4. 2019-06-29 Fastly representative — All questions have been answered and remediation is complete.