← Google Trust Services LLC cases
Bugzilla #2017747
Certificate Problem Report
Google Trust Services: Outdated BR version in some validation records
RESOLVED
FIXED
Google Trust Services LLC
AI Summary
Google Trust Services (GTS) discovered that an incorrect Baseline Requirements (BR) version number was recorded in domain validation logs, although the validation processes themselves complied with the applicable BRs. The issue was identified during internal checks and was limited to logging inaccuracies. GTS paused certificate issuance to address the problem, implemented a fix, and resumed issuance. A full incident report was provided, detailing the timeline and root causes, including a gap in the BR change management process and ambiguity in the BR language. GTS has committed to maintaining compliance with BR requirements and has participated in discussions to clarify these standards.
Chronology
- Non-compliance start date; first stale BR version recorded.
- Non-compliance identified.
- Non-compliance end date; issuance paused and fix deployed.
- Incident report closure requested.
Participants
Google Trust Services
External References
Similar Local Cases
Google Trust Services: Failure to properly validate IP address
Google Trust Services: Missing authorization audit log entry for certificate issuance
Google Trust Services: Short OCSP outage
Google Trust Services: Self-audit tooling MPIC perspective verification inconsistency
Google Trust Services: Incorrect OCSP responses for new ICAs under test
Google Trust Services: Forbidden Domain Validation Method 3.2.2.4.10
Google Trust Services: Failure to respond to CPR within 24 hours
Google Trust Services: Inconsistent MPCAA secondary perspective logging