← Izenpe S.A. cases
Bugzilla #1976256
Self Reported Incident
IZENPE: IssuingDistributionPoint extension in CRLs not marked as Critical
RESOLVED
FIXED
Izenpe S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Izenpe S.A. reported an incident where the 'IssuingDistributionPoint' extension in their Certificate Revocation Lists (CRLs) was not marked as critical, violating CA/Browser Forum Baseline Requirements. The issue was identified on July 1, 2025, after a third-party notification. Izenpe took corrective action by marking the extension as critical on July 11, 2025, and submitted a preliminary incident report. They acknowledged the oversight in tracking changes to the Baseline Requirements and committed to improving their monitoring processes to prevent future occurrences. The incident has been resolved with the necessary changes implemented.
Chronology
- Baseline Requirements updated to require 'IssuingDistributionPoint' to be marked as critical.
- Izenpe notified of the compliance issue.
- Izenpe marked the extension as critical in all CRLs.
Thread Activity
- Izenpe S.A. — Izenpe confirmed the issue and filed a preliminary report.
- Izenpe S.A. — Izenpe marked the 'IssuingDistributionPoint' extension as critical.
- Izenpe S.A. — Closure report submitted detailing the incident and remediation.
Participants
Izenpe S.A.
CCADB representative
Google representative
External References
Similar Local Cases
IZENPE: Outdated CPS for Izenpe Root
Izenpe: Incorrect Unicode characters in Subject
IZENPE: not allowed Key Usage in ocsp responder certificate
Izenpe: Duplicate attribute in Subject
Izenpe: Not allowed Qualifier ID OID on Certificate Policies extension
Izenpe: CRL and ARL exceed validity period value by one second
SSL.com: Expired certificate for a “Valid” Test Website
SECOM: Cybertrust Japan's CRL lacks the critical flag in the issuingDistributionPoint extension