← Cybertrust Japan / JCSI cases
Bugzilla #1986911
Certificate Problem Report
SECOM: No updated CRLs published for Cybertrust Japan SureMail CA G4
RESOLVED
FIXED
Cybertrust Japan / JCSI
AI Summary
The Cybertrust Japan SureMail CA G4 failed to publish updated Certificate Revocation Lists (CRLs) for 13 consecutive days due to an operational error. This incident was identified when a support staff member was validating a certificate. The last CRL was published on August 20, 2025, and it expired on August 27, 2025, leading to non-compliance with RFC 5280 and S/MIME BR requirements. No end-entity certificates were revoked during this period. The issue was resolved with the publication of the CRL on September 3, 2025, and several corrective actions have been implemented to prevent future occurrences.
Chronology
- Last CRL issued and published
- CRL expired, non-compliance began
- Non-compliance identified and CRL published
Participants
SECOM Trust Systems - ONO Fumiaki
External References
Similar Local Cases
SECOM: No updated CRLs published for Cybertrust Japan SureMail CA G4
SECOM: S/MIME CA Modified Opinion Report of Cybertrust Japan (CTJ)
Cybertrust Japan: Root CRLs exceed maximum validity period by one second
SECOM: S/MIME CA Modified Opinion Report of Cybertrust Japan (CTJ)
Cybertrust Japan: CRL signature algorithm encoding error
SECOM: Cybertrust Japan's CRL lacks the critical flag in the issuingDistributionPoint extension
SECOM: Invalid stateOrProvinceName
SECOM: Difference in upper and lower case between CN field and SAN