← DigiCert cases
Bugzilla #1974539
Self Reported Incident
Revocation Issue
DigiCert: DCV logging issue
RESOLVED
FIXED
DigiCert
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
DigiCert self-reported a logging issue affecting the evidence of Domain Control Validations (DCV) for a small subset of TLS certificates. The issue was identified during an internal audit and involved less than 1000 certificates, which were revoked within 24 hours of discovery. The problem stemmed from a race condition in the logging process when using DNS CNAME aliases for domain validation, leading to incomplete logs. DigiCert has since corrected the logging bug and implemented enhanced monitoring and auditing processes to prevent recurrence. The incident has been resolved, and all affected certificates have been revoked.
Chronology
- DigiCert discovered a logging issue during an internal audit.
- All affected certificates were revoked, and the logging bug was corrected.
- DigiCert requested closure of the incident after completing all remediation actions.
Thread Activity
- DigiCert — DigiCert reported a logging issue affecting TLS DCV evidence.
- DigiCert — DigiCert provided a full incident report detailing the issue and its impact.
- DigiCert — DigiCert confirmed all remediation actions were completed and requested closure.
Participants
DigiCert
Google representative
CCADB representative
External References
Similar Local Cases
DigiCert: Some CRLs were not updated for a few days
DigiCert: CAA processing during network disruption
DigiCert: Re-use of WHOIS validation shortly after deadline
DigiCert: Misissued code signing certificates
DigiCert: Random value in CNAME without underscore prefix
DigiCert: Several non-functioning AIA URLs
DigiCert: Threat of legal action to stifle Bugzilla discourse
DigiCert: Malformed ICA