DigiCert: Domain used for CRLs and OCSP has expired

DigiCert reported that the domain digicert-validation.com, used for hosting CRLs and OCSP responders, expired on November 11, 2024, leading to a temporary outage of these services for seven impacted Intermediate Certificate Authorities (ICAs). The issue arose due to non-standard management of the domain, which was registered through a service for the Chinese market. DigiCert has since renewed the domain and restored the services. They have implemented action items to automate the monitoring of domains included in AIA/CDP fields in issued certificates to prevent similar incidents in the future. All action items were completed by January 31, 2025.

1. 2024-11-11 Domain registration expired for digicert-validation.com
2. 2024-11-12 DigiCert's internal monitoring alerted that the CRL and OCSP are not responding
3. 2024-11-12 Domain was renewed and services were brought back up

1. 2024-11-12 Mm representative — Reported that the domain expired and hostnames are not resolving.
2. 2024-11-15 DigiCert — Provided a summary of the incident and its impact.
3. 2025-01-31 DigiCert — Confirmed completion of all action items to prevent future issues.
4. 2025-02-06 Mozilla representative — Scheduled to close the bug.