← Certigna cases
Bugzilla #1774418
Certificate Problem Report
Certigna: Certificate issued with validity period greater than 398-days
RESOLVED
FIXED
Certigna
AI Summary
Certigna identified a certificate issued on June 12, 2022, with a validity period of 400 days, exceeding the maximum allowed of 398 days. The incident was escalated, and corrective actions were implemented, including revocation of the certificate and updates to verification scripts. The CA communicated the issue to relevant teams and reported it to their supervisory body. Improvements to both pre- and post-delivery checks have been deployed to prevent similar occurrences in the future.
Chronology
- Certificate with 400-day validity identified and revoked.
- Improvements to checks deployed in production.
- Bug resolved and closed.
Participants
Josselin Allemandou
Ben Wilson
Mathew Hodson
Michel Lebihan
External References
Similar Local Cases
Certigna: ARL without reasoncode for recent revoked CA certificates
Certigna: Precertificate with a validity period greater than 398-days
Certigna: Multiple Reserved Certificate Policy Identifiers in CA certificates
Certigna: Failure to respond to CPR within 24 hours
Certigna: Revocation delay for TLS certificates with basic constraint not marked as critical
Certigna: AIA CA issuer field pointing to PEM encoded cert
eMudhra emSign PKI Services : Issue with revocation as part of automated reissuance
Certigna: CRL URL Disclosure