← Agence Nationale de Certification Electronique cases
Bugzilla #1988405
Certificate Problem Report
TunTrust: Issue with Valid test Certificate
RESOLVED
Agence Nationale de Certification Electronique
AI Summary
On September 10, 2025, a DNS failover redirected traffic to a disaster recovery site, which was serving an expired SSL certificate due to outdated DNS records. The issue was reported on September 11, 2025, and was resolved the same day by updating the DNS records to the correct IP address. The incident was limited to the valid OV SSL test website certificate and did not affect other components. Remedial actions have been implemented to enhance monitoring and verification processes.
Chronology
- DNS failover redirected traffic to DR site with outdated IP
- Problem report received regarding expired certificate
- DNS records updated to correct IP address
Participants
pki@tuntrust.tn
External References
Similar Local Cases
TunTrust: OCSP unreachable
TunTrust: CRL and OCSP unavailable
SSL.com: Expired certificate for a “Valid” Test Website
Apple: Test website certificates expired
DigiCert: Issuance of Cert with Compromised Key
DigiCert / ADACOM: published expired CRLs
NETLOCK: Unavailability of the document repository
DigiCert: Some CRLs were not updated for a few days