Asseco Data Systems (Certum): certum.pl DNS service outage (self-reported incident)
This case documents a self-reported DNS service outage for the certum.pl domain that occurred between 16:30 on 2025-04-04 (CEST) and 02:00 on 2025-04-05 (CEST). The outage affected most services registered under certum.pl, including services related to SSL certificates, but did not affect the issuance of certificates. The CA stated the incident was discovered internally through system monitoring and later provided a full incident report. The CA reported that the outage was caused by a misconfiguration in DNS domain delegation, which resulted in DNS queries not being routed to the appropriate servers. The CA restored the delegation to the correct servers by 2025-04-04 23:54 UTC and reported that remediation included restructuring infrastructure tests from external locations and implementing a detailed test to prevent recurrence, as well as separating domain administration privileges between Certum and ADS. The CA published a report closure summary stating all planned improvements and action items were completed and requested closure of the incident. The bug is marked RESOLVED with resolution FIXED.
- certum.pl DNS service outage began due to a DNS delegation misconfiguration.
- DNS service was restored after delegation was corrected; certificate issuance was not affected.
- Domain transfer process was initiated to separate domain administration permissions at the registrar level.
- Transfer of the last domain was completed, finalizing the permission-separation action item.
- Report closure summary was published and closure was requested.
- Assecods representative — Filed a preliminary incident report stating the outage was internally discovered via system monitoring and that a full report would follow by 2025-04-18.
- Asseco Data Systems S.A. — Submitted the full incident report with timeline, stated self-reported source of disclosure, described DNS delegation misconfiguration as the cause, and detailed remediation and policy impacts.
- Asseco Data Systems S.A. — Posted that there were no updates on the bug.
- Asseco Data Systems S.A. — Posted that there were no updates on the bug.
- Asseco Data Systems S.A. — Provided an update that domains would be transferred to a different registrar to achieve separation of domain management permissions, and requested a next-update flag.
- Asseco Data Systems S.A. — Reported that the transfer of the last domain was completed and that the final action item was finalized, requesting closure if no further comments.
- Asseco Data Systems S.A. — Published the report closure summary stating remediation steps were completed and requested closure of the incident.
- Assecods representative — Requested closure, stating all action items were completed and the closure summary had been published.
- CCADB representative — Issued a final call for comments and stated the incident would be closed on approximately 2025-06-10.