← Microsoft Corporation cases
Bugzilla #1740585
Self Reported Incident
Microsoft PKI Services: Unrevoked 4 intermediate certificates
RESOLVED
FIXED
Microsoft Corporation
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Microsoft PKI Services, which discovered that four intermediate certificates were revoked on June 24, 2021, but were subsequently 'unrevoked' a few hours later. The issue was reported by Kathleen Wilson on November 10, 2021, leading Microsoft to acknowledge the problem and initiate an investigation. They provided a preliminary incident report detailing the timeline of events and corrective actions taken, including updating the Certificate Revocation List (CRL) to accurately reflect the revocation status. The CA has since implemented a playbook to prevent similar issues in the future, and all remediations were confirmed completed by November 30, 2021.
Chronology
- Microsoft revoked four intermediate certificates and then unrevoked them a few hours later.
- The issue was reported by Kathleen Wilson.
- Microsoft confirmed completion of all remediations.
Thread Activity
- Mozilla representative — Reported the issue regarding the unrevoked certificates.
- Microsoft Corporation — Acknowledged the issue on behalf of John Mason.
- Microsoft Corporation — Provided a preliminary incident report detailing the timeline and actions taken.
- Microsoft Corporation — Confirmed completion of all remediations and requested resolution of the bug.
Participants
Mozilla representative
Microsoft Corporation
External References
Similar Local Cases
Microsoft PKI Services: Underscore in SAN
Microsoft PKI Services: "unknown" OCSP response for issued certificates
Microsoft PKI Services: Malformed ICAs (missing certificate policy extensions)
Microsoft PKI Services: 3-Month Access Review Process Failure
Microsoft PKI Services: Loss of Archived Firewall logs from Retention Store
Microsoft PKI Services: Trusted Role Control Failure
Microsoft: improper disclosure of CRL
Microsoft PKI Services: Failure to disclose Unconstrained Intermediate within 7 Days