← Microsec Ltd. cases
Bugzilla #1651632
Delayed Revocation
Microsec: Failure to revoke noncompliant ICA within 7 days
RESOLVED
FIXED
Microsec Ltd.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Microsec Ltd. faced a delayed revocation issue regarding noncompliant Intermediate CA (ICA) certificates that were not revoked within the required timeframe of 7 days. The CA was notified of the misissued OCSP responder certificates on July 1, 2020, and initiated an investigation. Although two affected ICA certificates were revoked, two others could not be revoked in time due to their significant impact on users. Microsec developed a plan to address the issue, which included destroying the affected keys and issuing new certificates. By October 16, 2020, all affected keys were destroyed, and the misissued ICA certificates were revoked, resolving the incident.
Chronology
- Microsec received notification about misissued OCSP responder certificates.
- Microsec destroyed all ICA keys affected in this incident.
Thread Activity
- Microsec representative — Microsec began investigating the misissued OCSP responder certificates.
- Microsec representative — Microsec reported ongoing work on alternative solutions to the issue.
- Microsec representative — Microsec revoked the misissued ICA certificates.
- Microsec representative — Microsec confirmed the destruction of all affected ICA keys.
Participants
Microsec representative
Mozilla representative
External References
Similar Local Cases
Microsec: Delayed revocation of the misissued certificates
Camerfirma: Failure to revoke within 7 days: OCSP EKU issue
Actalis: Failure to revoke within 7 days: OCSP EKU issue
D-Trust: Delay beyond 5 days in revoking misissued certificate
Telekom Security: Delayed Revocations of Sub-CA certificates
QuoVadis: Failure to revoke within 7 days: OCSP EKU issue
IdenTrust: Delay beyond 5 days in revoking misissued certificates
GlobalSign: Failure to revoke noncompliant ICA within 7 days