← Netlock cases
Bugzilla #1819105
Incident
NETLOCK: Disclosed CRL is expired
RESOLVED
FIXED
Netlock
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Netlock disclosed that the Certificate Revocation List (CRL) for its NETLOCK Trust EV CA 3 had expired, with the last update recorded in May 2020. The issue was first reported by Andrew Ayer via Bugzilla. In response, Netlock identified the problem and took steps to fix the incorrectly generated CRL list, which had been cached incorrectly on one of their servers. They are currently redesigning their monitoring system to prevent such issues in the future. The bug has been resolved with the status 'FIXED'.
Chronology
- Netlock disclosed the expired CRL.
- Netlock identified and averted the problem.
- Bug resolved with status 'FIXED'.
Thread Activity
- Mm representative — Netlock disclosed the CRL for NETLOCK Trust EV CA 3 is expired.
- Google representative — Requested a full incident report and explanation for the delay.
- Netlock — Provided a timeline of actions taken in response to the issue.
- Mozilla representative — Inquired about updates from Netlock.
- Google representative — Expressed concerns over delays in incident reporting.
- Netlock — Updated on the review of the monitoring system.
- Mozilla representative — Indicated intent to close the bug.
Participants
Mm representative
Google representative
Netlock
Mozilla representative
External References
Similar Local Cases
NETLOCK: CRL Error on CRL Watch of NETLOCK DVCA CRL
NETLOCK: CRL not published in DER Encoded Format
Netlock: CA in AIA in PEM format
e-commerce monitoring GmbH: CRLs with mismatched issuer
NETLOCK: CA/Browser Forum TLS BR Non-compliance
Netlock: Failure to Provide Weekly Updates
NETLOCK: Expired Test Website Certificate
NETLOCK: did not file a preliminary incident report or respond to a third-party report within the 72-hour timeframe