← Certainly LLC cases
Bugzilla #1968836
Certificate Problem Report
Certainly: Sample Websites Unavailable
RESOLVED
FIXED
Certainly LLC
AI Summary
On May 23, 2025, Certainly LLC deployed a configuration change that removed the OCSP URI from end-entity certificates. This led to a failure in the service that hosts their sample websites, causing them to go offline for 49 hours. The issue was identified on May 26, 2025, and was promptly remediated. The incident highlighted the need for improved documentation and alerting mechanisms, which have since been addressed. All action items have been completed, and the case is now resolved.
Chronology
- Configuration change deployed, removing OCSP URI.
- Service restart fails due to missing OCSP URI.
- Issue identified and resolved.
Participants
Daniel Jeffery
External References
Similar Local Cases
Certainly: Serving invalid or incomplete CRLs
Certainly: Serving Expired OCSP Responses
Certainly: Serving Bad OCSP Responses
Certainly: TLS Using ALPN TLS Version and OID
Certainly: Early CRL Entry Removal
Certainly: Intermediate certificates with wrong time encoding
GoDaddy: OV Documentation Reuse
IdenTrust: Expired CRLs