← Deutsche Telekom Security GmbH cases
Bugzilla #2080708
Ca Certificate Compliance
Incident
Externally Reported Incident
Vulnerability Disclosure
Telekom Security preliminary incident report: OCSP responder used incorrect signature algorithm for P-384 signing key
ASSIGNED
Deutsche Telekom Security GmbH
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Deutsche Telekom Security GmbH opened this case after receiving a Certificate Problem Report about its OCSP responder producing non-compliant OCSP responses. The report said the responder used an incorrect signature algorithm for a P-384 signing key, contrary to the Baseline Requirements requirement that P-384 signatures use ECDSA with SHA-384 and a specific AlgorithmIdentifier encoding. The incident was disclosed as third-party reported, not self-discovered. Telekom Security filed a preliminary incident report and said it needed more time to complete the full incident report. It stated that the full report would be provided no later than 2026-10-23.
Chronology
- A Certificate Problem Report was received about non-compliant OCSP responses using an incorrect signature algorithm for a P-384 signing key.
- Telekom Security opened a preliminary incident report describing the OCSP responder issue.
- Telekom Security said it would provide the full incident report by this date.
Thread Activity
- Telekom representative — Reported that the OCSP responder used an incorrect signature algorithm for a P-384 signing key and identified the case as third-party reported.
- Telekom representative — Said more time was needed to complete the full incident report and promised it by 2026-10-23.
Participants
Telekom representative
External References
Similar Local Cases
Telekom Security: Typographical error in CPS section 7.1.6
Telekom Security: Root-CA certificates published in PEM encoded format
Telekom Security: Failure in automatic issuance of CRLs
Telekom Security: Failure to respond to a certificate problem report within 24 hours
eMudhra emSign PKI Services: Delegated OCSP Responder certificates containing cRLDistributionPoints extension
Actalis: Non-compliant OCSP responses and OCSP responder certificate
NAVER Cloud Trust Services: OCSP responses with an empty responseExtensions
NETLOCK: Certificate Problem Report [CRL BR S7.2.2]