← Netlock cases
Bugzilla #2001327
Incident
Revocation Issue
NETLOCK: Missing CDP Disclosure in CCADB
RESOLVED
FIXED
Netlock
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
NETLOCK received an external report indicating that a CA certificate lacked the required CRL Distribution Points (CDP) disclosure in the Common CA Database (CCADB). An internal investigation confirmed that while the certificate contained a valid CDP extension, this information was not reflected in the CCADB metadata due to a disclosure workflow omission. NETLOCK has since revoked four affected CA certificates and removed them from the CCADB. They have also implemented a compliance checklist to prevent future omissions and are committed to maintaining compliance with CCADB requirements.
Chronology
- NETLOCK initiated an internal investigation regarding missing CDP disclosure.
- Revocation of all four affected CA certificates was successfully completed.
Thread Activity
- Netlock — NETLOCK received an external report about missing CRL Distribution Points disclosure.
- Netlock — NETLOCK confirmed the missing CDP in CCADB was due to a metadata omission.
- Netlock — NETLOCK provided a status update on the remediation actions.
- Netlock — NETLOCK confirmed the successful revocation of all affected CA certificates.
- Netlock — NETLOCK submitted the Incident Closure Summary, confirming all actions were completed.
Participants
Netlock
Community commenter
Apple representative
CCADB representative
External References
Similar Local Cases
Netlock: unspecifed revocation code (0) in CRL
NETLOCK: Missing Related Incidents section in the bug report
NETLOCK: did not file a preliminary incident report or respond to a third-party report within the 72-hour timeframe
NETLOCK: Expired Test Website Certificate
NETLOCK: Full Incident Report was not published within 14 days of notification
Netlock: CA in AIA in PEM format
NETLOCK: OCSP Service Returning Error for Issued Certificate
NETLOCK: CRL not published in DER Encoded Format