← SSL.com cases
Bugzilla #1550576
Certificate Problem Report
SSL.com: Expired CRLs
RESOLVED
INVALID
SSL.com
AI Summary
The case involved SSL.com reporting expired Certificate Revocation Lists (CRLs) while processing revoked intermediate certificates for OneCRL. It was determined that all listed issuing CAs were previously revoked, preventing them from issuing new CRLs. The issue was ultimately closed as invalid since the parent certificate was revoked, which explained the inability to create new CRLs.
Chronology
- Initial report of expired CRLs by Kathleen Wilson.
- Chris Kemmerer confirmed that all listed CAs were revoked.
- Case closed as invalid due to parent certificate revocation.
Participants
Kathleen Wilson
Chris Kemmerer
External References
Similar Local Cases
SSL.com: CRL not found - SSL.com-Enterprise-Intermediate-EV-RSA-4096-R1.crl
SSL.com: Delayed revocation of certificate with weak key
SSL.com: Revocation due to keyCompromise while keeping other TLS cert w/ the same pubKey unrevoked
Izenpe: Certificates not disclosed in CCADB
SSL.com: Failure to process CAA records from one SubCA
Atos: duplicate serial numbers
Add revoked certificate Certification Authority of WoSign G2 issued by Certum CA root to OneCRL
Leaked private key for Cisco cert