← Certainly LLC cases
Bugzilla #1968836
Incident
Self Reported Incident
Certainly: Sample Websites Unavailable
RESOLVED
FIXED
Certainly LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
On May 23, 2025, Certainly LLC deployed a configuration change that removed the OCSP URI from end-entity certificates. This led to a failure in the service responsible for hosting sample websites, which resulted in a 49-hour period of unavailability. The incident was identified internally, and a fix was implemented promptly after proper triage on May 26, 2025. The CA acknowledged the violation of the Baseline Requirements due to the unavailability of the sample websites and has since completed action items to improve documentation, training, and alert behavior to prevent future occurrences. The case has been resolved with all action items completed.
Chronology
- Configuration change deployed that removed OCSP URI from certificates.
- Service hosting sample websites went offline due to configuration change.
- Incident identified and resolved, restoring access to sample websites.
Thread Activity
- Fastly representative — Preliminary incident report submitted detailing the configuration change and service failure.
- Fastly representative — Full incident report provided with timeline and root cause analysis.
- Fastly representative — Closure summary submitted, confirming completion of all action items.
- CCADB representative — Final call for comments on the incident report before closure.
Participants
Fastly representative
CCADB representative
External References
Similar Local Cases
Certainly: Expired certificates on "Valid" and "Revoked" test websites
Certainly: Serving Expired OCSP Responses
Certainly: Early CRL Entry Removal
IdenTrust: Root OCSP Signer certificate mis-issuance
Certainly: TLS Using ALPN TLS Version and OID
Certainly: Serving Bad OCSP Responses
ANF AC: Delayed Disclosure of Updated Policy Documents in CCADB
Certainly: Missing audit log entries for certificates issued during capacity testing