← Netlock cases
Bugzilla #1962426
Incident
NETLOCK: CA/Browser Forum TLS BR Non-compliance
RESOLVED
FIXED
Netlock
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
NETLOCK reported a compliance issue involving an expired TLS certificate served on its designated test website, https://valid.ev.tanusitvany.hu/. The incident was triggered by a community report on April 21, 2025, which highlighted that the expired certificate violated CA/Browser Forum TLS Baseline Requirements. NETLOCK acknowledged the non-compliance, attributed it to an under-configured monitoring system during a transition to automated workflows, and took corrective actions. A new valid certificate was issued and deployed by April 28, 2025. The CA has since implemented enhanced monitoring and operational responsibilities to prevent future occurrences.
Chronology
- Certificate for the test website expired.
- Community member reported the expired certificate.
- New valid certificate issued and deployed.
Thread Activity
- Netlock — Opened a preliminary incident report regarding the expired certificate.
- Netlock — Submitted a full incident report detailing the compliance failure.
- Netlock — Provided an update on the implementation of monitoring systems.
- Netlock — Submitted an incident closure summary confirming all action items were completed.
Participants
Netlock
Community commenter
Internet Security Research Group
External References
Similar Local Cases
NETLOCK: Full Incident Report was not published within 14 days of notification
NETLOCK: did not file a preliminary incident report or respond to a third-party report within the 72-hour timeframe
NETLOCK: Missing Related Incidents section in the bug report
NETLOCK: Expired Test Website Certificate
NETLOCK: CRL not published in DER Encoded Format
NETLOCK: Missing CDP Disclosure in CCADB
Netlock: unspecifed revocation code (0) in CRL
Netlock: CA in AIA in PEM format