NetLock: Delayed revocation report connected to ticket 1680378

This case concerns a report about delayed revocation by NetLock, connected to ticket 1680378. In the timeline provided in the bug, NetLock states that a certificate profile problem was identified on 2020-11-20 and that issuance was stopped. NetLock reports that replacement certificates were issued on 2020-12-01. It also states that all infected certificates were revoked on 2020-12-07 except one, and that the last certificate was revoked on 2020-12-31. The report is described as being about delayed revocation rather than the certificates themselves. NetLock says it will modify its inner RA/CA policy to clarify and simplify revocation requirements, including steps for validating reported errors, consulting the Compliance Unit when needed, and revoking in cases of uncertainty, with no exception on revocation within the required timeframes. The bug is marked RESOLVED with resolution FIXED.

1. 2020-11-20 NetLock identified a certificate profile problem and stopped issuance.
2. 2020-12-01 NetLock issued replacement certificates.
3. 2020-12-07 NetLock revoked all infected certificates except one.
4. 2020-12-31 NetLock revoked the last remaining certificate.

1. 2021-01-26 Netlock — Varga Viktor submitted a delayed revocation report, including a timeline and remediation steps to modify NetLock’s RA/CA revocation policy.
2. 2021-03-31 Community commenter — Ryan Sleevi thanked NetLock for affirmatively stating there is no exception on revocation within the required timeframes.
3. 2021-04-07 Mozilla representative — B. Wilson indicated the bug would be scheduled for closure on or about 14-Apr-2021 unless other issues arose.