← SSL.com cases
Bugzilla #1942270
Revocation Issue
Repository Issue
SSL.com: Revocation process requires submission to a form that is unusable
RESOLVED
INVALID
SSL.com
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves a report from a user about difficulties in reporting a compromised certificate to SSL.com. The user attempted to use the provided online form but found it ambiguous regarding the required 'Certificate Thumbprint'. SSL.com acknowledged the report and confirmed that the compromised certificate was revoked within the required timeline. However, they also recognized the need for usability improvements in their reporting mechanisms. SSL.com has since updated their CPR submission form to accept multiple certificate identifiers and provide clearer guidance for users. The case has been marked as 'invalid' as SSL.com complied with the necessary procedures.
Chronology
- User reported a certificate with a compromised key to SSL.com.
- SSL.com confirmed the compromised certificate was revoked.
- SSL.com updated their CPR submission form for better usability.
Thread Activity
- Hboeck representative — Reported issues with SSL.com's certificate revocation process.
- SSL.com — Confirmed that the compromised certificate was revoked and acknowledged usability issues.
- SSL.com — Announced updates to the CPR submission form to improve user experience.
- Mozilla representative — Intended to close the bug as invalid.
Participants
Hboeck representative
SSL.com
Thisisntrocket representative
Mozilla representative
External References
Similar Local Cases
SSL.com: Failure to process CAA records from one SubCA
SSL.com: "unknown" OCSP response for issued certificates
SSL.com: Expired certificate for a “Valid” Test Website
SSL.com: Revocation due to keyCompromise while keeping other TLS cert w/ the same pubKey unrevoked
SSL.com: Issuance of 1 EV TLS certificate using a Registration/Incorporation Agency not included in our approved public list.
KIR S.A.: Many certificates with OCSP Unknown
DigiCert: inconsistent revocation / OCSP / CRL behavior
SSL.com: Issuance of TLS certificates with domain validation methods prohibited by SC-45