← e-tugra cases
Bugzilla #1687330
Certificate Problem Report
E-Tugra: Intermittent OCSP response with status 'Unknown'
RESOLVED
FIXED
e-tugra
AI Summary
E-Tugra faced an issue where their OCSP responder intermittently returned an 'Unknown' status for certain certificates. The problem was first reported on January 18, 2021, and was promptly addressed by the CA. A detailed investigation revealed that the issue stemmed from one of their OCSP servers not publishing the affected certificates, which led to the incorrect status responses. E-Tugra has since implemented improvements to their monitoring systems to prevent similar issues in the future.
Chronology
- Bug reported by Matthias
- E-Tugra began investigation and resolved the issue
- New quality control component put into production
- Incident scheduled for closure
Participants
Matthias
Davut Tokgöz
Ryan Sleevi
Ben Wilson
External References
Similar Local Cases
E-Tugra: Insufficient serial number entropy
Entrust: SSL Certificates issued with Un-verified IP Addresses
KIR S.A.: CN domain not in SAN
Sectigo: CPR response issues
Network Solutions: 2021 Audit Observation #1
E-Tugra: commonName not in SAN
E-Tugra: Validity period > 825 days
E-Tugra: The failure to revoke a certificate