Actalis: Incorrect revocation dates in CRL entries

Actalis reported that a CRL issued by Actalis Domain Validation Server CA G3 contained incorrect revocationDate values for 149 revoked certificates. The issue was first identified after a third-party report on 2026-09-23, and Actalis said the affected CRL was reissued with corrected dates on 2026-09-25. Actalis stated that the underlying certificate records contained inconsistent date values and that other CRLs were reviewed with no similar issue found. The full incident report says the problem began with CRL no. 9196 published on 2026-08-06 and persisted until the corrected CRL was published. The thread remains open with weekly updates, and Actalis said progress is aligned with scheduled action items.

1. 2026-08-06 Actalis published a CRL for Actalis Domain Validation Server CA G3 that contained incorrect revocationDate values for 149 revoked certificates.
2. 2026-09-23 A third party reported that CRL number 10337 showed 149 entries with revocationDate encoded as 1970-01-21.
3. 2026-09-25 Actalis corrected the affected records and reissued the CRL with the anomalous revocation dates fixed.

1. 2026-09-25 Staff representative — Actalis filed a preliminary incident report describing the incorrect revocation dates, the third-party report, and the reissued CRL.
2. 2026-10-02 Staff representative — Actalis said it was continuing its internal investigation and would publish the full incident report within the required timeframe.
3. 2026-10-09 Staff representative — Actalis filed the full incident report, including the timeline, impact, and corrective actions.
4. 2026-10-16 Staff representative — Actalis posted a weekly update saying progress was aligned with scheduled action items.