D-Trust: CRL HTTP Media Type

RESOLVED FIXED D-TRUST

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

D-Trust disclosed an incident regarding its CRL distribution endpoints serving CRLs with the media type application/x-pkcs7-crl instead of the recommended application/pkix-crl as per RFC 5280. This issue was identified following an external report on January 23, 2026, and after an internal review, D-Trust found no justification for the deviation. The configuration was updated to comply with RFC 5280 on February 5, 2026. Additionally, D-Trust integrated CRL Watch monitoring into its internal alerting system by February 12, 2026. The incident was resolved and the case is now closed.

Model: gpt-4o-mini Generated: 2026-06-13 21:35 UTC Revised: 2026-06-16 18:49 UTC Confidence: 0.85 17 comments

Chronology

2026-01-23 External notification received regarding CRL media type compliance.
2026-02-05 CRL delivery configuration updated to application/pkix-crl.
2026-02-12 Integration of CRL Watch monitoring completed.

Thread Activity

2026-01-26 D-Trust — D-Trust received an external report about CRL media type compliance.
2026-02-07 D-Trust — Full incident report detailing the issue and actions taken was provided.
2026-04-01 Bdr representative — Clarified that the integration of CRL Watch monitoring was completed ahead of schedule.
2026-04-10 Bdr representative — D-Trust is preparing the closure report for the incident.

Participants

D-Trust Community commenter Cooperjr representative Bdr representative Cabbage representative CCADB representative

External References

Original Bugzilla Case sslmate.com

Similar Local Cases

#2007116 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Externally Reported Incident Opened 2025-12-19 Still Open · 94% similar

D-Trust: CRL URL Disclosure

AI Summary CA Owner

#1924385 RESOLVED Ca Certificate Compliance Revocation Issue Closure Request Opened 2024-10-13 · Closed 2025-07-16 · 93% similar

D-Trust: Missed Revocation of TLS certificates affected by Bugzilla 1884714

AI Summary CA Owner

#1610303 RESOLVED Ca Certificate Compliance Opened 2020-01-20 · Closed 2023-02-22 · 88% similar

D-TRUST: Issuance of non-conformant SSL certificate

AI Summary CA Owner

#1793440 RESOLVED Self Reported Incident Certificate Misissuance Opened 2022-10-03 · Closed 2023-02-22 · 88% similar

D-TRUST: CRL not DER-encoded

AI Summary CA Owner

#1563772 RESOLVED Self Reported Incident Opened 2019-07-05 · Closed 2026-06-12 · 87% similar

D-TRUST: Precertificate OU > 64 Characters

AI Summary CA Owner

#1647468 RESOLVED Ca Certificate Compliance Opened 2020-06-22 · Closed 2023-02-22 · 87% similar

D-TRUST: Wrong key usage (Key Encipherment)

AI Summary CA Owner

#1682270 RESOLVED Ca Certificate Compliance Incident Closure Request Opened 2020-12-14 · Closed 2026-06-12 · 87% similar

D-TRUST: Private Key Disclosed by Customer as Part of CSR

AI Summary CA Owner

#1756122 RESOLVED Self Reported Incident Certificate Misissuance Opened 2022-02-18 · Closed 2023-02-22 · 87% similar

D-TRUST: Wrong key usage (Key Agreement)

AI Summary CA Owner