IdenTrust: Expired CRLs

IdenTrust Services, LLC reported an incident involving expired Certificate Revocation Lists (CRLs) for the 'IdenTrust Commercial Root CA 1'. The expired CRL led to approximately 137,000 downloads during a 90-minute window, violating CA/B Forum Baseline Requirements. The issue arose due to a failure in the notification process of an impending expiration, attributed to a misconfiguration in the mail system. The CA has since corrected the configuration and updated their monitoring system to prevent future occurrences.

1. 2022-09-14 New CRL created to replace upcoming expiration
2. 2022-09-16 CRL expired and alert received
3. 2022-09-16 Expired CRL replaced
4. 2022-09-30 Configuration issue resolved