Actalis: Failure to revoke certs within the BR required timeframe
This case involves Actalis's failure to revoke a significant number of certificates within the required timeframe as stipulated by the Baseline Requirements (BR). The issue was identified in March 2019, and Actalis initially planned to revoke the majority of affected certificates by the end of June 2019. However, they were unable to meet this deadline, completing the revocation by the end of July instead. Actalis has since implemented several internal procedural changes, including updates to their incident management plan and training for staff, to prevent future occurrences. The case has been resolved with all planned actions completed.
- All involved certificates have been revoked.
- Staff representative — This bug is related to the process for dealing with the incident regarding the timeframe for revoking certificates.
- Fastly representative — Giorgio: please update this bug when each of the remaining actions described in comment #1 is completed.
- Staff representative — Last update. We have received the final approval by AGID and we will publish the new version of the CPS.
- Fastly representative — It appears that all questions have been answered and remediation is complete.