← D-TRUST cases
Bugzilla #2055250 Ccadb Disclosure Issue Externally Reported Incident

D-TRUST: Incomplete Disclosure of CRL URLs

ASSIGNED D-TRUST
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

D-TRUST reported a Certificate Problem Report received from a community member on 2026-07-13. The CPR stated that HTTP URLs in the crlDistributionPoints extension of unexpired certificates were not disclosed in the "JSON Array of all Full CRL URLs" field of the corresponding CCADB records. D-TRUST’s investigation confirmed that the URLs were missing at the CCADB records and stated it will update the affected records accordingly. D-TRUST also said certificate validity is not affected and that no revocation is required. The thread notes that a Full Incident Report will follow within 14 days. The bug is currently in ASSIGNED status.

Model: gpt-5.4-nano Generated: 2026-07-16 19:47 UTC Confidence: 0.83 1 comment
Chronology
  1. D-TRUST received an external Certificate Problem Report alleging missing HTTP CRL URLs in CCADB records for unexpired certificates.
  2. D-TRUST submitted a preliminary incident report and committed to updating the affected CCADB records.
Thread Activity
  1. Bdr representative — Submitted a preliminary incident report confirming missing CRL URLs in CCADB records, stating no revocation is required, and indicating a full incident report will follow within 14 days.
Participants
Bdr representative
Similar Local Cases
#2055047 ASSIGNED Ccadb Disclosure Issue Externally Reported Incident Opened 2026-07-14 Still Open · 73% similar
DigiCert: Incomplete disclosure of CRL URLs in CCADB
#2007116 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Externally Reported Incident Opened 2025-12-19 Still Open · 69% similar
D-Trust: CRL URL Disclosure
#2055120 ASSIGNED Ccadb Disclosure Issue Opened By Ca Opened 2026-07-15 Still Open · 62% similar
Chunghwa Telecomm: Incomplete disclosure of CRL URLs in CCADB
#2053948 ASSIGNED Self Reported Incident Ccadb Disclosure Issue Opened By Ca Single Ca Owner Opened 2026-07-09 Still Open · 62% similar
IdenTrust: Delayed disclosure of Intermediate CA in CCADB
#2047866 ASSIGNED Ccadb Disclosure Issue Repository Issue Self Reported Incident Opened 2026-06-16 Still Open · 61% similar
certSIGN: incorrect URL in CCADB
#2007216 ASSIGNED Ca Certificate Compliance Incident Ccadb Disclosure Issue Problem Reporting Failure Opened 2025-12-20 Still Open · 61% similar
GoDaddy: CRL Disclosure in CCADB Mismatch with Issued Certificates
#2055449 UNCONFIRMED Ccadb Disclosure Issue Opened By Ca Opened 2026-07-16 Still Open · 60% similar
Firmaprofesional: Delayed and inaccurate policy-document disclosures for SIGNE Autoridad de Certificacion - 2020
#2050850 ASSIGNED Ccadb Disclosure Issue Repository Issue Problem Reporting Failure Opened 2026-06-26 Still Open · 60% similar
Asseco DS / Certum: HTTP 404 returned by CRL Distribution Point URLs for six pre-inclusion Root CAs

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action