← Microsoft Corporation cases
Bugzilla #1740585
Certificate Problem Report
Microsoft PKI Services: Unrevoked 4 intermediate certificates
RESOLVED
FIXED
Microsoft Corporation
AI Summary
Microsoft PKI Services experienced an incident involving the unrevocation of four intermediate certificates. Initially revoked on June 24, 2021, these certificates were mistakenly unrevoked shortly after. The issue was reported by Kathleen Wilson, prompting an investigation by Microsoft. They acknowledged the problem and provided a preliminary incident report, detailing the timeline of events and corrective actions taken. The certificates were ultimately confirmed as revoked in the Certificate Revocation List (CRL) on November 13, 2021, and Microsoft has since implemented measures to prevent similar issues in the future.
Chronology
- Four intermediate certificates were revoked.
- Certificates were mistakenly unrevoked.
- Incident reported by Kathleen Wilson.
- Certificates confirmed as revoked in CRL.
- Remediations completed and playbook updated.
Participants
Kathleen Wilson
John Mason
Mohan R
Ryan Dickson
External References
Similar Local Cases
Microsoft PKI Services: Malformed ICAs (Key Usage Malformed)
Microsoft PKI Services: Underscore in SAN
Microsoft PKI Services: "unknown" OCSP response for issued certificates
Microsoft PKI Services: OCSP Responder does not know a Certificate
Microsoft PKI Services: Malformed ICAs (missing certificate policy extensions)
Microsoft PKI Services: Null Character Bug and Microsoft Root CAs
Microsoft DSRE PKI: Microsoft shares wildcard certificates among cloud instances
DigiCert: 4 CRLs unavailable or not responding