← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1652922
Delayed Revocation
PKIoverheid: Failure to revoke within 7 days: OCSP EKU issue
RESOLVED
DUPLICATE
Government of The Netherlands, PKIoverheid (Logius)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns Logius PKIoverheid’s revocation timing for certificates affected by Bug 1649964, described as an “OCSP EKU issue.” The CA stated that it requires more than 7 days to revoke the affected certificates and said it would post a detailed incident report within a week. The bug was then closed as a duplicate because there was already another bug opened (Bug 1652604). A Mozilla participant confirmed that the bug was marked as a duplicate of Bug 1652604. No additional remediation details beyond the planned incident report were provided in the thread excerpt.
Chronology
- PKIoverheid reported that revocation for certificates affected by Bug 1649964 would take more than 7 days and planned to publish an incident report.
Thread Activity
- Logius representative — Logius PKIoverheid said it requires more than 7 days to revoke certificates affected by Bug 1649964 and would post a detailed incident report within a week.
- Logius representative — The reporter said the bug could be closed because Bug 1652604 had already been opened.
- Community commenter — Ryan Sleevi noted the bug was marked as a duplicate of bug 1652604.
Participants
Logius representative
Community commenter
Mozilla representative
External References
Similar Local Cases
PKIoverheid: Failure to revoke within 7 days: OCSP EKU issue
DigiCert: Failure to revoke within 7 days: OCSP EKU issue
Staat der Nederlandend / PKIoverheid: Non-BR-Compliant Certificate Issuance
GoDaddy: Failure to revoke key-compromised certificates within 24 hours
Actalis: Failure to revoke within 7 days: OCSP EKU issue
Izenpe: Failure to revoke within 5 days
DigiCert: Failure to revoke key-compromised certificates within 24 hours
Actalis: Delayed revocation of non-BR-compliant CA Certificate within 7 days