← Netlock cases
Bugzilla #1822809
Certificate Problem Report
NETLOCK: SSL certificates with OU field - revocation delay
RESOLVED
FIXED
Netlock
AI Summary
Netlock faced a delay in revoking SSL certificates that included an Organizational Unit (OU) field, which was not completed within the required timeframe as per the Baseline Requirements (BR). The delay was attributed to customer requests that necessitated extending the revocation deadline. Netlock has since implemented a manual control process and is working on automated checks to prevent future occurrences. The issue has been resolved, and the last certificate was revoked on March 16, 2023.
Chronology
- Revocation date extended based on customer feedback.
- All but one TLS certificate renewed without OU field.
- Last certificate revoked.
Participants
Tamás Horváth
Chris Clements
Ben Wilson
External References
Similar Local Cases
NETLOCK: Disclosed CRL is expired
NETLOCK: SSL certificates with OU field
NETLOCK: CRL Error on CRL Watch of NETLOCK DVCA CRL
NETLOCK: Pre-certificates revoked with certificateHold reason
CFCA: Delayed reporting of revocation of an intermediate CA certificate
NetLock: Intermediate CA Certificate Missing from Audit Reports
NETLOCK: Invalid CT data in issued certs (SABRE.CT misconfiguration)
NetLock: Failure to revoke noncompliant ICA within 7 days