← Asseco Data Systems S.A. cases
Bugzilla #1668523
Delayed Revocation
Revocation Issue
Asseco DS / Certum: Failure to revoke within 5 days
RESOLVED
FIXED
Asseco Data Systems S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Asseco Data Systems S.A. (Certum) failing to revoke certificates within the required 5-day timeframe following a compliance issue. The CA was alerted to the problem on September 26, 2020, and initiated a series of actions to address the situation, including notifying affected customers and analyzing the database for impacted certificates. Certum ultimately revoked 777 certificates on October 1, 2020, and completed the revocation of all affected certificates by October 9, 2020. The CA has since implemented measures to prevent future delays, including changes to partner contracts and enhancements to their API for quicker communication during incidents. The case has been resolved with all planned actions completed.
Chronology
- Certum received an alert email regarding the need for certificate revocation.
- Certum revoked 777 certificates.
- All affected certificates were revoked.
Thread Activity
- Assecods representative — Reported the issue and indicated that a report would follow.
- Asseco Data Systems S.A. — Provided a detailed timeline of actions taken in response to the incident.
- Asseco Data Systems S.A. — Confirmed that the last certificate was revoked.
- Asseco Data Systems S.A. — Outlined planned steps to prevent future revocation delays.
- Asseco Data Systems S.A. — Informed that all planned steps had been completed.
Participants
Assecods representative
Asseco Data Systems S.A.
Community commenter
Fozzie representative
Mozilla representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Asseco DS / Certum: Invalid stateOrProvinceName field
Asseco DS / Certum: Failure to revoke intermediate certificates within the BR time period
Asseco DS / Certum: Delayed revocation of SHECA cross certificate
Asseco DS / Certum: Delayed revocation of SSL.COM cross certificate
Asseco DS / Certum: Delayed revocation of EV certificates
Sectigo: Failure to revoke key-compromised certificates
Sectigo: Failure to revoke key-compromised certificate within 24 hours
Asseco DS / Certum: Invalid dnsNames