← Microsoft Corporation cases
Bugzilla #1879552
Incident
Microsoft PKI Services: OCSP Responder does not know a Certificate
RESOLVED
FIXED
Microsoft Corporation
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Microsoft PKI Services was notified by Mozilla on February 8, 2024, that one of their certificates was unknown to their OCSP responder. Following this notification, Microsoft investigated and found a total of 101 certificates that were not recognized by the OCSP. They promptly uploaded the missing certificates to the OCSP server, resolving the issue by February 14, 2024. Microsoft also suspended issuance from the suspected problematic instance of their tools and implemented corrective actions to prevent future occurrences. The case has been resolved with all impacted certificates now properly responding in OCSP.
Chronology
- Microsoft PKI Services notified by Mozilla about an unknown certificate.
- All impacted certificates uploaded to OCSP responder.
Thread Activity
- Microsoft Corporation — Initial report of the incident and actions taken.
- Microsoft Corporation — Updated incident report detailing further findings and actions.
- Microsoft Corporation — Confirmed completion of all repair items and requested closure of the bug.
Participants
Microsoft Corporation
Mozilla representative
External References
Similar Local Cases
Microsoft PKI Services: Firewall log data retention
Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence
Microsoft PKI Services: Failure to disclose Unconstrained Intermediate within 7 Days
Microsoft PKI Services: Improper Disclosure of CRL
Microsoft DSRE PKI: problem reporting e-mail in CPS does not work
Microsoft PKI Services: Failure to update action item status within 3 days
Microsoft PKI Services: Failure to report within 72 hrs - Sample Site Certs Expired
Microsoft PKI Services: Sample Site Certificates expired