← SSL.com cases
Bugzilla #1962809
Self Reported Incident
Revocation Issue
SSL.com: Expired certificate for a “Valid” Test Website
RESOLVED
FIXED
SSL.com
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SSL.com reported an incident involving an expired certificate for a test website, which was discovered through a third-party Certificate Problem Report. The expired certificate was replaced with a valid one shortly after the issue was identified. SSL.com acknowledged that this incident violated section 2.2 of the TLS Baseline Requirements. Following the incident, SSL.com initiated an investigation and implemented several remediation actions, including enhancing their monitoring systems and creating a master list of all certificates to prevent future occurrences. The incident was resolved, and all action items have been completed as of July 2025.
Chronology
- Third-party report submitted regarding the expired certificate.
- Full Incident Report submitted by SSL.com.
- Incident Closure Summary submitted, confirming all action items completed.
Thread Activity
- SSL.com — Preliminary Incident Report submitted detailing the expired certificate issue.
- SSL.com — Full Incident Report provided with a timeline and analysis of the incident.
- SSL.com — Incident Closure Summary submitted, detailing remediation actions taken.
Participants
SSL.com
Google representative
CCADB representative
External References
Similar Local Cases
SSL.com: Incorrect Open MPIC Lambda implementation by EJBCA ACME Service
SSL.com: Failure to process CAA records from one SubCA
SSL.com: Issuance of 1 EV TLS certificate using a Registration/Incorporation Agency not included in our approved public list.
SSL.com: Issuance of TLS certificates with domain validation methods prohibited by SC-45
DigiCert: DCV logging issue
Sectigo / SSL.com: Late disclosure of updated SSL.com CP/CPS to CCADB
OATI: Misissuance detected by PKIMetal
Chunghwa Telecom: Issuance of certificate using keys previously reported as compromised