← Asseco Data Systems S.A. cases
Bugzilla #1668523
Certificate Problem Report
Asseco DS / Certum: Failure to revoke within 5 days
RESOLVED
FIXED
Asseco Data Systems S.A.
AI Summary
Asseco Data Systems S.A. (Certum) faced a significant incident involving the delayed revocation of 2202 certificates, which were not revoked within the required 5-day timeframe. The issue arose after a notification was received on September 26, 2020, leading to a series of actions that included customer communication and the eventual revocation of the certificates on October 9, 2020. The delay was attributed to the need for careful coordination with a major client to avoid significant disruption. Certum has since implemented measures to improve their incident response and revocation processes to prevent future occurrences.
Chronology
- Notification received regarding certificate issue.
- First batch of certificates revoked.
- All affected certificates revoked.
Participants
Aleksandra Kurosz
Wojciech Trapczyński
Ryan Sleevi
George Fozzie
External References
Similar Local Cases
Asseco DS / Certum: Failure to provide a preliminary report within 24 hours.
Asseco DS / Certum: Failure to revoke intermediate certificates within the BR time period
Asseco DS / Certum: Invalid stateOrProvinceName field (recurrent incident)
Asseco DS / Certum: commonName not from subjectAltName entries
Asseco DS / Certum: Incorrect localityName
Asseco DS / Certum: Intermediate CA certificates not listed in audit report
Asseco DS / Certum: Cross-certificate with wrong policy identifier
Asseco DS / Certum: IP in dnsName