← SECOM Trust Systems CO., LTD. cases
Bugzilla #1735998
Certificate Problem Report
SECOM: Root CRLs exceed maximum validity period by 1 second
RESOLVED
FIXED
SECOM Trust Systems CO., LTD.
AI Summary
SECOM Trust Systems identified an issue where their Root Certificate Revocation Lists (CRLs) were issued with a validity period of 365 days and 1 second, which exceeds the maximum allowed period. The issue was discovered during a review of Bug 1731164, leading to a decision to reissue the CRLs with a corrected validity period of 364 days and 1 second. The problem was limited to four Root CRLs and did not affect subscriber certificates. The case was resolved on November 10, 2021, after confirming no further questions remained.
Chronology
- Root CRLs generated with a validity period of 365 days and 1 second.
- Decision made to reissue Root CRLs.
- CRL publication manual revised to generate CRLs in 364 days plus one second.
- New CRLs generated with corrected validity period.
- Bug closed after confirming no further questions.
Participants
Hisashi Kamo
Ben Wilson
External References
Similar Local Cases
SECOM: FUJIFILM intermediate CA Certificate not listed in audit statement
Collect the full set of URLs for all CRLs used by EV certs issued by SECOM Trust
SECOM: certificate for which “OU=-”
SECOM: Ambiguity on KeyUsage with ECC public key
SECOM: certificate for which “L” and “ST” not set
SECOM: Incorrect OCSP Delegated Responder Certificate
SECOM: Non-BR-Compliant OCSP Responders
SECOM: certificate for .test TLD