← IdenTrust Services, LLC cases
Bugzilla #1677239
Certificate Problem Report
IdenTrust: Service Degradation
RESOLVED
FIXED
IdenTrust Services, LLC
AI Summary
IdenTrust experienced service degradation due to a DNS lookup failure that began on November 6, 2020. The issue was identified when the OCSP responder monitoring system alerted IdenTrust engineers to abnormal behavior. Following customer reports of intermittent errors, it was confirmed that a problematic DNS server was causing degraded service for some users. The DNS server was removed from service, resolving the issue. IdenTrust has since implemented changes to improve monitoring and prevent similar incidents in the future.
Chronology
- Received alert from OCSP responder monitoring system
- Identified degradation in service after customer report
- Problematic DNS server removed from service
Participants
IdenTrust
Ryan Sleevi
Mozilla
External References
Similar Local Cases
IdenTrust: Unavailable CRL for IdenTrust ‘DST Root CA X3’.
IdenTrust: Expired CRLs
IdenTrust: Failure to provide OCSP responses for valid ICA certificates
IdenTrust: Incorrect Subject Details for HydrantId
IdenTrust: OCSP Responder missing id-pkix-ocsp-nocheck
IdenTrust: Certificate with missing details flagged by OCSP Watch
IdenTrust: Bad OCSP Responses
IdenTrust: OCSP Signer Certificate Missing No-Check Extension