← DigiCert cases
Bugzilla #1651461
Delayed Revocation
DigiCert: Failure to revoke within 7 days: OCSP EKU issue
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns DigiCert's failure to revoke certain certificates within the required timeframe due to an OCSP EKU issue. The CA acknowledged that it would not be able to revoke all impacted CAs within the stipulated 7 days and committed to providing a full incident report. Throughout the thread, DigiCert provided updates on its remediation efforts, including timelines for revocation and key destruction for affected certificates. The case has been resolved with the completion of the necessary actions and the final key destruction report submitted.
Chronology
- DigiCert acknowledged the failure to revoke impacted certificates within the required timeframe.
- DigiCert successfully revoked the remaining certificates as per the established timeline.
Thread Activity
- DigiCert — We acknowledge that DigiCert will not be able to revoke all CAs impacted by the issue referenced under this bugzilla.
- Community commenter — Full Incident Report provided detailing the timeline and actions taken by DigiCert.
- Community commenter — I can confirm the revoke happened on schedule on the 16th.
Participants
DigiCert
Community commenter
Mozilla representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
DigiCert: Failure to revoke key-compromised certificates within 24 hours
DigiCert: Delay of revocation for EV audit inconsistency incident
DigiCert: Underscores - Citi
DigiCert: Failure to revoke key-compromised certificate
Digicert: Delayed Revocation for bug 1894560
DigiCert: Underscores - Discover
DigiCert: Underscores - Canadian Imperial Bank of Commerce
DigiCert: Delayed revocation of IV certificates