eMudhra: Failure to respond to a Problem Report within 24 hours
On June 3, 2025, a Certificate Problem Report (CPR) was submitted to eMudhra regarding ECDSA verification failures for multiple CRLs. eMudhra did not respond within the required 24-hour timeframe due to the initial CPR being quarantined by spam filters. The issue was identified on June 5, 2025, when a follow-up email was received, prompting immediate investigation. eMudhra has since submitted a preliminary incident report and a full incident report detailing the root cause and corrective actions taken, including the implementation of a daily review process for quarantined emails. The case has been resolved with all action items completed.
- CPR submitted but quarantined by spam filters.
- Follow-up email received, triggering investigation.
- Preliminary incident report submitted.
- Full incident report submitted and closure requested.
- Sectigo — Reported lack of response to CPR submitted on June 3.
- Emudhra representative — Submitted preliminary incident report detailing the issue.
- Emudhra representative — Confirmed standard operating procedures for incident reviews.
- Emudhra representative — Requested closure of the incident report after implementing corrective measures.