← Microsoft Corporation cases
Bugzilla #2008847
Certificate Problem Report
Microsoft PKI Services: Sample Site Certificates expired
RESOLVED
FIXED
Microsoft Corporation
AI Summary
Microsoft PKI Services reported an incident regarding expired sample site certificates for two of their Root Certificates. The issue was identified on December 29, 2025, when it was discovered that both valid and revoked certificate samples were out of compliance with the CA/Browser Forum's Baseline Requirements. The expired certificates were updated the same day, but the revoked certificates were not officially revoked until December 30, 2025. The incident highlighted a lack of monitoring for certificate expirations, prompting Microsoft to implement new monitoring and alerting processes to prevent future occurrences.
Chronology
- Sample Site Certificates for 'Valid' and 'Revoked' expired
- Microsoft PKI Services became aware of the issue and updated certificates
- Revoked certificates were officially revoked
- Preliminary incident report opened
- Closure report submitted
Participants
CentralPKI@microsoft.com
rdaurne77@gmail.com
incident-reporting@ccadb.org
External References
Similar Local Cases
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – Existing CAs
Microsoft PKI Services: Failure to Update Full Incident Report within 14 days of discovering new root cause
Microsoft PKI Services: Failure to Revoke in 5 Days for 1962829
Microsoft PKI Services: Improper Disclosure of CRLs – Does Not Match CA Subject
Microsoft PKI Services: Failure to report within 72 hrs - Sample Site Certs Expired
Microsoft PKI Services: Improper Disclosure of CRL
Microsoft PKI Services: Improper Disclosure of CRLs – Protocol Scheme
Microsoft PKI Services: Incorrect Revocation Reason Code