DigiCert duplicate report: expired CRL published during software migration

RESOLVED DUPLICATE DigiCert

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

DigiCert filed a preliminary incident report after receiving a third-party report that an Issuing CA was serving a recently expired CRL for DigiCertG5TLSRSA4096SHA3842021CA1. DigiCert said its investigation found that an in-progress software migration disrupted publishing and alerting, causing the stale CRL to be published for about 4 hours. DigiCert stated that publishing was restored for updated CRLs and that OCSP services were not impacted. The bug was later identified as a duplicate of bug 2072906 and was closed as such. The thread does not show any further remediation steps in this bug beyond the duplicate closure.

Model: gpt-5.4-mini Generated: 2026-10-20 17:37 UTC Confidence: 0.93 4 comments

Chronology

2026-09-17 A recently expired CRL was published for DigiCertG5TLSRSA4096SHA3842021CA1 during a software migration.
2026-09-18 The bug was marked as a duplicate of bug 2072906 and closed.

Thread Activity

2026-09-17 DigiCert — DigiCert reported that a third party found the expired CRL, explained that migration disrupted publishing and alerting, and said OCSP was unaffected.
2026-09-17 Community commenter — Noted that this bug is a duplicate of bug 2072906.
2026-09-18 DigiCert — DigiCert agreed it was a duplicate and asked for the bug to be closed.
2026-09-18 CCADB representative — The bug was marked as a duplicate of bug 2072906.

Participants

DigiCert Community commenter CCADB representative

External References

Original Bugzilla Case bugzilla.mozilla.org

Related Bugzilla IDs Mentioned

#2072906

Similar Local Cases

#2072906 ASSIGNED Ca Certificate Compliance Incident Externally Reported Incident Revocation Issue Opened 2026-09-17 Still Open · 85% similar

DigiCert: Expired CRL

AI Summary CA Owner

#2009491 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Repository Issue Opened 2026-01-09 · Closed 2026-02-17 · 84% similar

DigiCert: Several non-functioning AIA URLs

AI Summary CA Owner

#2033170 RESOLVED Ca Security Vulnerability Incident Self Reported Incident Revocation Issue Opened 2026-04-18 · Closed 2026-07-20 · 81% similar

DigiCert: Misissued code signing certificates

AI Summary CA Owner

#2055047 RESOLVED Common Ca Database Ccadb Disclosure Issue Incident Self Reported Incident Opened 2026-07-14 · Closed 2026-08-17 · 77% similar

DigiCert: Incomplete disclosure of CRL URLs in CCADB

AI Summary CA Owner

#2055539 RESOLVED Problem Reporting Failure Incident Externally Reported Incident Revocation Issue Opened 2026-07-16 · Closed 2026-08-11 · 76% similar

DigiCert: Delayed availability of OCSP responses

AI Summary CA Owner

#2069766 RESOLVED Ca Certificate Compliance Externally Reported Incident Problem Reporting Failure Opened 2026-09-06 · Closed 2026-09-22 · 75% similar

DigiCert: CPR subject.countryName

AI Summary CA Owner

#2058363 RESOLVED Common Ca Database Ccadb Disclosure Issue Incident Externally Reported Incident Opened 2026-07-28 · Closed 2026-08-29 · 75% similar

DigiCert: Blank SubCA Owner field in CCADB for cross-certificate

AI Summary CA Owner

#2062100 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Certificate Misissuance Opened 2026-08-10 · Closed 2026-09-17 · 74% similar

DigiCert: jurisdictionCountry in EV certificate

AI Summary CA Owner