NETLOCK: Bug 1891331 replacement - delayed revocation -

This case addresses the delayed revocation of 522 TLS certificates issued by NETLOCK, which contained a deprecated 'explicitText' value in the User Notice extension, violating BRG 2.0 requirements. The incident was triggered when NETLOCK was notified of the compliance issue on April 3, 2024. Although revocation for standard certificates was completed by April 9, 2024, some revocations were delayed at the request of customers deemed critical to national infrastructure. NETLOCK has since acknowledged that such delays are not compliant with industry standards and has implemented corrective actions, including updates to internal policies and subscriber contracts to ensure timely revocation in the future.

1. 2024-04-03 NETLOCK notified of compliance issue with TLS certificates.
2. 2024-04-06 Revocation of affected certificates began.
3. 2024-04-09 All standard misissued certificates revoked.
4. 2024-04-30 Revocation of delayed certificates completed.
5. 2025-03-10 Terms and conditions updated to include 24-hour revocation deadline.
6. 2025-07-15 Bilateral readiness reviews with critical infrastructure subscribers completed.