← DigiCert cases
Bugzilla #1548719
Delayed Revocation
DigiCert: Revoked intermediate certificates not in CRL
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves DigiCert's failure to include revoked intermediate certificates in their Certificate Revocation List (CRL). The issue was identified by Kathleen Wilson on May 3, 2019, during the processing of revoked intermediate certificate records in the Common CA Database (CCADB). DigiCert acknowledged the problem and took corrective actions, including contacting the relevant parties to rectify the CRL entries. The CRLs were subsequently updated and the issue was marked as resolved. DigiCert has implemented monitoring procedures to prevent similar issues in the future.
Chronology
- DigiCert became aware of missing revoked intermediate certificates in their CRL.
- DigiCert confirmed the CRL entries were updated and the issue was resolved.
Thread Activity
- Mozilla representative — Reported missing revoked intermediate certificates in the CRL.
- DigiCert — Attached updated CRL for MSC Class 2 G3.
- DigiCert — Confirmed that the CRL was republished and the issue was resolved.
Participants
Mozilla representative
DigiCert
External References
Similar Local Cases
DigiCert: Failure to revoke key-compromised certificate
DigiCert: Failure to revoke within 7 days: OCSP EKU issue
DigiCert: Underscores - Discover
DigiCert: Underscores - Ericsson
DigiCert: IP in dnsName
DigiCert: Failure to revoke key-compromised certificates within 24 hours
DigiCert: Failure to revoke invalid serialNumber EV certificates within 5 days
DigiCert: Underscores - Citi