← SSL.com cases
Bugzilla #2029230
Self Reported Incident
Revocation Issue
SSL.com: Incorrect Open MPIC Lambda implementation by EJBCA ACME Service
RESOLVED
FIXED
SSL.com
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SSL.com reported an incident involving an incorrect Open MPIC Lambda implementation by the EJBCA ACME service, which allowed domain control validation (DCV) to be completed based solely on remote Network Perspectives. This issue was disclosed following a third-party report received on April 2, 2026. SSL.com confirmed the compliance failure and executed a mass revocation plan, successfully revoking approximately 1.7 million affected certificates within 24 hours. The CA has since implemented a fix and updated its testing procedures to prevent future occurrences. A full incident report was submitted, and SSL.com has committed to ongoing compliance with CA/B Forum requirements.
Chronology
- Third-party report received regarding potential compliance issue.
- Mass revocation of affected certificates completed.
- Report closure summary submitted, detailing remediation actions.
Thread Activity
- SSL.com — Preliminary incident report filed to Bugzilla.
- SSL.com — Full incident report submitted with detailed timeline and impact.
- SSL.com — Report closure summary submitted, confirming completion of remediation actions.
Participants
SSL.com
Ml representative
Teliacompany representative
Community commenter
CCADB representative
External References
Similar Local Cases
SSL.com: Expired certificate for a “Valid” Test Website
SSL.com: Issuance of 1 EV TLS certificate using a Registration/Incorporation Agency not included in our approved public list.
SSL.com: Failure to process CAA records from one SubCA
HARICA: Incorrect Open MPIC Lambda implementation by EJBCA ACME Service
SSL.com: Issuance of TLS certificates with domain validation methods prohibited by SC-45
SECOM: Non conformant SCT Encoding Due to SCT Modification by Cybertrust Japan (CTJ)
SECOM: 2025 S/MIME CA Modified Opinion Report of Cybertrust Japan (CTJ)
Chunghwa Telecom: Issuance of certificate using keys previously reported as compromised