← Disig, a.s. cases
Bugzilla #2007066
Certificate Problem Report
Disig: Missing CA Disig R2I2 Certification Service Full CRL URLs in CCADB
RESOLVED
FIXED
Disig, a.s.
AI Summary
Disig identified a missing CRL Distribution Point for the CA Disig R2I2 Certification Service in the CCADB. The issue was reported on December 18, 2025, and was resolved the following day. The root cause was attributed to a combination of human error and procedural deficiencies, specifically related to changes in CCADB policy requirements. Disig has since updated its internal verification procedures to prevent future occurrences.
Chronology
- CCADB Policy Version 2.0 became effective.
- Disig received a report of the missing CRL URL.
- Disig confirmed the missing CRL URL and updated CCADB entries.
Participants
Peter Miskovic
External References
Similar Local Cases
Disig: TLS certificate with basicConstraints not marked as critical
Disig: Certificates with invalid embedded SCT signature
Disig: Non-BR-Compliant OCSP Responders
Disig: Two certificates with same serial number
Disig CRL broken, mis-listed? / CA list CRL links need auditing.
Disig: Certificates with incorrect Subject attribute order
Disig: Delayed Full Incident Report
NETLOCK: CRL Error on CRL Watch of NETLOCK DVCA CRL