← Certainly LLC cases
Bugzilla #2061909 Ca Certificate Compliance Incident Self Reported Incident Revocation Issue Historical Reference

Certainly self-reported incident: BR §2.2 test website certificates expired after renewal stopped

ASSIGNED Certainly LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

Certainly reported a self-disclosed incident affecting its BR §2.2 test websites. Between 2026-08-01 03:47 UTC and 2026-08-05 14:45 UTC, four of its six test websites presented Subscriber Certificates whose validity periods had expired. Certainly said the root cause was a one-off manual production deployment change that prevented the VM’s daily reboot, and certificate renewal stopped because renewal runs during VM startup. The company said newly implemented monitoring detected the failures, but the alert remained at reduced priority under its review policy for new alerts. Certainly also noted that this was the third incident affecting these test websites in a little over 14 months, and it referenced prior bugs #1968836 and #2052399 as context. The bug remains ASSIGNED, with no resolution recorded in the thread excerpt.

Model: gpt-5.4-mini Generated: 2026-08-10 11:44 UTC Confidence: 0.97 1 comment
Chronology
  1. Non-compliance began when four BR §2.2 test websites started presenting expired Subscriber Certificates.
  2. Certainly identified and ended the non-compliance after monitoring detected the failures and incident response restored the affected state.
Thread Activity
  1. Fastly representative — Certainly filed a full incident report describing expired test-website certificates, the root cause, impact, timeline, and prior related incidents.
Participants
Fastly representative
Related Bugzilla IDs Mentioned
Similar Local Cases
#2052085 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Audit Finding Opened 2026-07-02 Still Open · 88% similar
Certainly: Missing audit log entries for certificates issued during capacity testing
#2052399 RESOLVED Incident Self Reported Incident Repository Issue Remediation Tracking Opened 2026-07-03 · Closed 2026-08-08 · 88% similar
Certainly: Expired certificates on "Valid" and "Revoked" test websites
#1954889 RESOLVED Self Reported Incident Revocation Issue Opened 2025-03-19 · Closed 2025-03-28 · 86% similar
Certainly: Early CRL Entry Removal
#1968836 RESOLVED Incident Self Reported Incident Opened 2025-05-28 · Closed 2025-08-26 · 78% similar
Certainly: Sample Websites Unavailable
#1900129 RESOLVED Revocation Issue Opened 2024-05-31 · Closed 2024-06-28 · 76% similar
Certainly: Serving invalid or incomplete CRLs
#2058918 ASSIGNED Ca Certificate Compliance Self Reported Incident Certificate Misissuance Validation Issue Opened 2026-07-29 Still Open · 71% similar
CFCA: Incorrect countryName values in OV subscriber certificates
#2060152 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Certificate Misissuance Opened 2026-08-03 Still Open · 70% similar
iTrusChina: Inconsistent EKUs in CP/CPS and Mis-issuance of TLS Certificates with clientAuth against CP/CPS
#2048626 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Repository Issue Opened 2026-06-18 · Closed 2026-08-04 · 70% similar
Kamu SM: Incorrect CRL Served at SSL CRL Distribution Point

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action