NETLOCK: Bug 1891331 replacement - delayed revocation -

This case involves NETLOCK's delayed revocation of TLS certificates that were issued with a deprecated 'explicitText' value in the User Notice extension, violating CA/Browser Forum Baseline Requirements (BRG 2.0). The issue was identified on April 3, 2024, prompting NETLOCK to initiate customer communication and plan for revocation. The CA revoked 522 affected certificates, with standard revocations completed by April 9, 2024, and additional revocations for critical customers completed by April 30, 2024. NETLOCK acknowledged that delays were inappropriate and has since revised its internal policies and subscriber contracts to ensure compliance with revocation timelines. The case is now resolved with all action items completed.

1. 2024-04-03 NETLOCK notified of compliance issue with TLS certificates.
2. 2024-04-09 Standard revocations completed for affected certificates.
3. 2024-04-30 Delayed revocations for critical customers completed.

1. 2025-02-12 Netlock — Opened a new ticket to summarize and address community questions regarding delayed revocation.
2. 2025-03-10 Mozilla representative — Marked Bug 1891331 as a duplicate of this bug.
3. 2025-05-30 Netlock — Acknowledged the need for compliance with revocation timelines and revised internal procedures.
4. 2025-08-11 CCADB representative — Final call for comments or questions on this Incident Report.