← SECOM Trust Systems CO., LTD. cases
Bugzilla #2017840
Certificate Problem Report
SECOM: Repository service disruption affecting subordinate CAs (CTJ)
RESOLVED
FIXED
SECOM Trust Systems CO., LTD.
AI Summary
SECOM Trust Systems reported a service disruption affecting repository services for its subordinate CA, Cybertrust Japan (CTJ). The incident occurred due to a sudden surge in access requests that led to a denial of service condition on one of the cloud service providers. This resulted in connection errors for clients attempting to retrieve CRLs or subordinate CA certificates from February 17 to February 18, 2026. SECOM's monitoring systems confirmed the unavailability of access to CTJ's CRLs during this period. The root cause was identified as inadequate risk assessment regarding the cloud provider's traffic management capabilities.
Chronology
- Incident began with a spike in access requests.
- Service was restored after isolating the affected server.
- Automated isolation with health check functionality was implemented.
- Closure report prepared and incident reported for closure.
Participants
cainfo@ml.secom-sts.co.jp
External References
Similar Local Cases
SECOM: Cybertrust Japan's CRL lacks the critical flag in the issuingDistributionPoint extension
SECOM: No updated CRLs published for Cybertrust Japan SureMail CA G4
SECOM: Invalid stateOrProvinceName
Collect the full set of URLs for all CRLs used by EV certs issued by SECOM Trust
SECOM: Non-BR-Compliant OCSP Responders
SECOM: failure to revoke underscores
SECOM: Insufficient Serial Number Entropy
SECOM: certificate for which “OU=-”