← Certigna cases
Bugzilla #2047843
Externally Reported Incident
Problem Reporting Failure
Certigna: Pre-certificates not recognised by the OCSP responder
ASSIGNED
Certigna
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The bug thread contains a preliminary incident report stating that the OCSP responder only recognises certificates issued by Certigna’s CAs. It further states that pre-certificates issued without a final leaf certificate are not recognised by the OCSP responder. The report cites TLS BR Version 2.2.7 section “4.9.9 On line revocation/status checking availability” as relevant policy. The thread explicitly says the source of the incident disclosure was a third party via a Certificate Problem Report. No resolution, remediation steps, or closure status are provided in the thread content shown. The bug is currently in ASSIGNED status.
Chronology
- Certigna reported (via a preliminary incident report) that its OCSP responder does not recognise pre-certificates lacking final leaf certificates.
Thread Activity
- j.allemandou@dhimyotis.com — Submitted a preliminary incident report describing OCSP recognition limitations for pre-certificates and noting the disclosure came from a third party via a Certificate Problem Report.
Participants
j.allemandou@dhimyotis.com
External References
Similar Local Cases
KIR: OCSP responder does not return status for precertificate
eMudhra emSign PKI Services :: OCSP Responder Returned "Unauthorized" for Some Pecertificates
Kamu SM: Incorrect CRL Served at SSL CRL Distribution Point
Microsec: Late response to a CPR
GoDaddy: Precertificates incorrectly logged to DigiCert SCT Logs
Asseco DS / Certum: Incorrect localityName
please remove Wells Fargo from your listing of root CA's
ANF AC: 2026 Audit Report Finding 1 out of 3