Google Trust Services: Failure to provide preliminary report within 24h

RESOLVED FIXED Google Trust Services LLC

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

Google Trust Services identified a failure in their communication process regarding a Certificate Problem Report (CPR) on May 20, 2022. They discovered that a preliminary report may not have been received by the subscriber due to an issue with their email handling tool. Although the investigation did not lead to a certificate revocation, Google Trust Services initiated a full technical investigation and reported the incident to Mozilla. They have since modified their procedures for responding to CPRs and are designing a new solution to prevent similar issues in the future. The case has been resolved with the implementation of these changes.

Model: gpt-4o-mini Generated: 2026-06-13 21:30 UTC Revised: 2026-06-16 18:44 UTC Confidence: 0.85 16 comments

Chronology

2022-05-20 Google Trust Services discovered a failure in their email handling tool related to a Certificate Problem Report.
2022-06-03 Google Trust Services concluded an analysis of older communications and identified additional CPRs with similar issues.
2022-06-22 Google Trust Services clarified their subscriber agreement regarding certificate issuance on behalf of third parties.
2022-06-30 The bug was marked for closure as the incident was resolved.

Thread Activity

2022-05-20 Google representative — Google Trust Services reported a potential issue with their email tool affecting a CPR response.
2022-05-27 Google representative — Google Trust Services provided a timeline of actions taken in response to the CPR.
2022-06-03 Google representative — Google Trust Services confirmed additional CPRs were affected by the same process breakdown.
2022-06-22 Google representative — Google Trust Services clarified their policy regarding third-party certificate issuance.
2022-06-30 Mozilla representative — Mozilla indicated the bug would be closed soon.

Participants

Google representative Mozilla representative Community commenter

External References

Original Bugzilla Case

Similar Local Cases

#1815874 RESOLVED Self Reported Incident Opened 2023-02-09 · Closed 2023-03-20 · 83% similar

Google Trust Services: incorrect SCT in certificate

AI Summary CA Owner

#1979457 RESOLVED Self Reported Incident Opened 2025-07-25 · Closed 2025-10-22 · 81% similar

Google Trust Services: Missing authorization audit log entry for certificate issuance

AI Summary CA Owner

#1630040 RESOLVED Self Reported Incident Opened 2020-04-14 · Closed 2023-02-22 · 79% similar

Google Trust Services: OCSP serving issue 2020-04-09

AI Summary CA Owner

#1630079 RESOLVED Self Reported Incident Opened 2020-04-14 · Closed 2023-02-22 · 79% similar

Google Trust Services: Invalid OCSP responses

AI Summary CA Owner

#2032511 RESOLVED Ca Security Vulnerability Self Reported Incident Opened 2026-04-16 · Closed 2026-05-29 · 78% similar

Google Trust Services: Short OCSP outage

AI Summary CA Owner

#1714968 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2021-06-07 · Closed 2023-02-22 · 72% similar

GlobalSign: Incorrect RegNumber-Org Type combination

AI Summary CA Owner

#1934790 RESOLVED Certificate Misissuance Self Reported Incident Opened 2024-12-03 · Closed 2025-01-14 · 71% similar

GlobalSign: OV TLS certificate with incorrect countryName value for organization

AI Summary CA Owner

#1649277 RESOLVED Self Reported Incident Incident Opened 2020-06-29 · Closed 2023-02-22 · 71% similar

DigiCert: Failure to provide a preliminary report within 24 hours.

AI Summary CA Owner