← Certainly LLC cases
Bugzilla #2061909 Ca Certificate Compliance Self Reported Incident Incident Validation Issue

Certainly self-reported incident: test website certificate renewal failure after production deployment drift; remediation completed and bug resolved

RESOLVED FIXED Certainly LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

Certainly reported a self-disclosed incident affecting its BR §2.2 test websites. Between 2026-08-01 and 2026-08-05, four of its six test websites presented Subscriber Certificates whose validity periods had expired. Certainly said the root cause was a one-off manual production deployment change that prevented the VM’s daily reboot, which in turn stopped certificate renewal because renewal runs during VM startup. The company also said replacement monitoring detected the failures, but the alert remained at reduced priority during an incomplete cutover from the legacy monitoring tool. Since the prior summary, Certainly reported that all four remediation action items were completed, including moving renewal to an externally scheduled workflow, promoting the replacement alert to paging priority, updating the incident-resolution procedure, and making reviewed source authoritative for production deployments. The report closure summary states that the remediation is complete and requests closure, and the bug is now RESOLVED/FIXED.

Model: gpt-5.4-mini Generated: 2026-08-10 11:44 UTC Revised: 2026-09-13 08:01 UTC Confidence: 0.98 7 comments
Chronology
  1. Four BR §2.2 test websites began presenting expired Subscriber Certificates.
  2. The non-compliance was identified and ended after incident response restored the affected state.
  3. Certainly stated that all remediation action items were complete and requested closure of the incident report.
  4. The bug was marked RESOLVED with resolution FIXED.
Thread Activity
  1. Fastly representative — Certainly filed a full incident report describing the expired test-website certificates, the root cause, impact, timeline, and prior related incidents.
  2. Fastly representative — Certainly reported that the externally managed scheduler had run successfully for 9 consecutive days and a pre-expiration alert rule had been deployed, while other action items remained incomplete.
  3. Fastly representative — Certainly reported that action items #1 and #2 were complete, while #3 and #4 were in progress.
  4. Fastly representative — Certainly reported that action item #3 was complete and action item #4 remained in progress.
  5. Fastly representative — Certainly posted a closure summary stating that all four action items were complete and requesting closure of the incident report.
  6. CCADB representative — CCADB issued a final call for comments or questions and said the report would be closed on approximately 2026-09-11.
Participants
Fastly representative CCADB representative
Related Bugzilla IDs Mentioned
Similar Local Cases
#2052399 RESOLVED Incident Self Reported Incident Repository Issue Remediation Tracking Opened 2026-07-03 · Closed 2026-08-08 · 99% similar
Certainly: Expired certificates on "Valid" and "Revoked" test websites
#2052085 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Audit Finding Opened 2026-07-02 · Closed 2026-09-05 · 96% similar
Certainly: Missing audit log entries for certificates issued during capacity testing
#1968836 RESOLVED Incident Self Reported Incident Opened 2025-05-28 · Closed 2025-08-26 · 88% similar
Certainly: Sample Websites Unavailable
#2048626 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Repository Issue Opened 2026-06-18 · Closed 2026-08-04 · 80% similar
Kamu SM: Incorrect CRL Served at SSL CRL Distribution Point
#2009491 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Repository Issue Opened 2026-01-09 · Closed 2026-02-17 · 80% similar
DigiCert: Several non-functioning AIA URLs
#2011314 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Externally Reported Incident Opened 2026-01-19 · Closed 2026-06-23 · 79% similar
Netlock: unspecifed revocation code (0) in CRL
#1974325 RESOLVED Incident Self Reported Incident Opened 2025-06-26 · Closed 2025-07-16 · 79% similar
ANF AC: Test Certificates Non-Compliance
#2063908 ASSIGNED Cp Cps Document Audit Document Policy Document Issue Incident Opened 2026-08-16 Still Open · 78% similar
Amazon Trust Services: CP/CPS missing explicit adherence to latest version of policies

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

⚠

Confirm action