Microsec: Delayed revocation of the misissued certificates

RESOLVED FIXED Microsec Ltd.

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

Microsec Ltd. reported a delayed revocation incident involving 46 misissued EV certificates lacking a CPSuri link. Following the receipt of a second notification regarding the misissuance, Microsec revoked 44 of the certificates within the required timeframe. However, two certificates, used in a PSD2 network, could not be replaced within the mandated period due to the complexity of their operational environment, prompting Microsec to request an extension for their revocation. The CA has since implemented measures to prevent future occurrences, including clearer communication of revocation timelines to customers and the establishment of a dedicated CA hierarchy for issuing PSD2 certificates. The incident has been resolved with all action items completed.

Model: gpt-4o-mini Generated: 2026-06-13 21:15 UTC Revised: 2026-06-16 19:17 UTC Confidence: 0.85 28 comments

Chronology

2024-03-24 Revocation of 44 misissued certificates completed.
2024-04-09 Revocation of 2 misissued PSD2 certificates completed.
2025-03-12 New CPS comes into effect.

Thread Activity

2024-03-22 Microsec representative — Microsec received reports of misissued certificates and began the revocation process.
2025-02-11 Microsec representative — Closure summary provided detailing the incident and remediation steps.

Participants

Microsec representative Mozilla representative

External References

Original Bugzilla Case

Similar Local Cases

#1651632 RESOLVED Delayed Revocation Opened 2020-07-09 · Closed 2023-02-22 · 90% similar

Microsec: Failure to revoke noncompliant ICA within 7 days

AI Summary CA Owner

#1886627 RESOLVED Delayed Revocation Opened 2024-03-20 · Closed 2024-06-01 · 73% similar

certSIGN: Delayed revocation

AI Summary CA Owner

#1896553 RESOLVED Delayed Revocation Opened 2024-05-14 · Closed 2025-02-12 · 71% similar

Telia: Delayed revocation of seven (7) certificates related to incident 1896108

AI Summary CA Owner

#1899466 RESOLVED Delayed Revocation Opened 2024-05-29 · Closed 2024-09-13 · 71% similar

Chunghwa Telecom: Controversial Values within Extension (2.5.29.9, subjectDirectoryAttributes)

AI Summary CA Owner

#1668523 RESOLVED Delayed Revocation Revocation Issue Opened 2020-10-01 · Closed 2023-02-22 · 71% similar

Asseco DS / Certum: Failure to revoke within 5 days

AI Summary CA Owner

#1709872 RESOLVED Delayed Revocation Opened 2021-05-06 · Closed 2023-02-22 · 70% similar

KIR S.A.: Delayed revocations of certificates

AI Summary CA Owner

#1886665 RESOLVED Delayed Revocation Opened 2024-03-21 · Closed 2025-02-28 · 70% similar

Hongkong Post: Delayed revocation of TLS certificates with Certificate Policies extension problem

AI Summary CA Owner

#1916478 RESOLVED Delayed Revocation Opened 2024-09-03 · Closed 2025-04-09 · 70% similar

eMudhra emSign PKI Services: Delayed Revocation of SSL/TLS Certificates

AI Summary CA Owner