← eMudhra Technologies Limited cases
Bugzilla #2007297
Incident
Repository Issue
eMudhra emSign PKI Services: CRL URL Mismatch Between CCADB Disclosure and Issued Certificates
RESOLVED
FIXED
eMudhra Technologies Limited
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
On December 19, 2025, eMudhra received an external report indicating a mismatch between the CRL Distribution Point (CRLDP) URLs in currently-valid certificates and those disclosed in the CCADB. An investigation confirmed that while the CRLs were accessible and correct, discrepancies in URL representation (such as http vs https) led to non-compliance with CCADB Policy Section 6.2. eMudhra took corrective actions by updating the CCADB records to ensure exact URL matches and implemented new verification steps to prevent future issues. The incident was resolved by January 1, 2026, with all action items completed and controls strengthened.
Chronology
- eMudhra received an external report about CRL URL mismatches.
- All corrective actions were completed.
Thread Activity
- Emudhra representative — Preliminary incident report submitted regarding the CRL URL mismatch.
- Emudhra representative — Full incident report provided detailing the investigation and remediation steps.
- Emudhra representative — Closure summary submitted, confirming completion of all action items.
Participants
Emudhra representative
HARICA
Mozilla representative
CCADB representative
External References
Similar Local Cases
eMudhra emSign PKI Services : Delayed Publication of Issuing CA Certificates in CCADB
eMudhra: Delayed Publication of Issuing CA Certificates In CCADB
Certigna: Multiple Reserved Certificate Policy Identifiers in CA certificates
Microsoft PKI Services: Improper Disclosure of CRLs – Protocol Scheme
Microsoft PKI Services: Improper Disclosure of CRLs – Does Not Match CA Subject
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – New CAs
IdenTrust: Root OCSP Signer certificate mis-issuance
eMudhra: CRL occasionally unavailable and returns 404 error