Actalis: CRL with duplicate serial number in revokedCertificates
On January 21, 2025, Actalis received a Certificate Problem Report (CPR) indicating that their Certificate Revocation List (CRL) for the Actalis Domain Validation Server CA G3 contained two entries for the same certificate serial number. Actalis acknowledged the issue, investigated, and found that a bug in their EJBCA software had caused both the pre-certificate and final certificate to be marked as revoked, leading to the duplication. The CA resolved the issue by removing the spurious entry and regenerating the CRL. They also set up a monitoring system to prevent future occurrences and opened a support ticket with the EJBCA vendor for further assistance. The incident was reported and subsequently closed after all action items were completed.
- Actalis received a Certificate Problem Report regarding duplicate entries in their CRL.
- Actalis acknowledged the CPR and began investigating the issue.
- Actalis confirmed the existence of a bug in the EJBCA software.
- Actalis completed all action items to address the identified root causes.
- Actalis submitted a closure summary for the incident.
- Staff representative — Actalis received a CPR notifying us of a problem in one of our CRLs.
- Staff representative — We confirmed the issue and started an investigation.
- Staff representative — We filed this incident on Bugzilla.
- Staff representative — We confirmed the clock starts on 2025-01-22 when the CPR was acknowledged.
- Staff representative — All action items have been successfully completed.