Telekom Security delayed response to a Certificate Problem Report within 24 hours
Deutsche Telekom Security GmbH reported that it received a Certificate Problem Report on Saturday, 2026-09-26, but did not respond until Monday morning. The bug is explicitly about the failure to provide first feedback within the 24-hour deadline in CA/B Forum Baseline Requirements Section 4.9.5. Telekom stated that this incident was self-reported and that it was not related to bug 2076096. The full incident report says the non-compliance began at 2026-09-27 16:24 UTC and ended at 2026-09-28 07:13 UTC, when the first email was sent to the reporter. Telekom also noted that the certificates mentioned in the problem report were revoked within the required timeframe, and that this bug concerns only the delayed response, not the underlying certificate issue. The bug remains assigned, and a later comment says the team is working on an open action item and requested the next update date be set to 2026-10-30.
- Telekom received a Certificate Problem Report.
- The 24-hour deadline for first feedback to the reporter passed without a response.
- Telekom sent the first email response to the problem reporter.
- All certificates affected by the problem report were revoked.
- Telekom representative — Telekom filed a preliminary incident report saying it received a Certificate Problem Report on 2026-09-26 but did not address it until the following Monday morning, and identified BR Section 4.9.5 as the relevant policy.
- Telekom representative — Telekom filed the full incident report with the UTC timeline, confirmed the non-compliance window, and said the bug is about delayed response rather than the revocation issue described in the report.
- Telekom representative — Telekom said it is working on the open action item and requested the Next Update field be set to 2026-10-30.