eMudhra self-reported a CPR about delegated OCSP responder certificates containing cRLDistributionPoints

ASSIGNED eMudhra Technologies Limited

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

eMudhra opened this case after receiving a Certificate Problem Report from a community member on 2026-10-09. The report said that delegated OCSP responder certificates used by ocsp.emsign.com and ocsp-a.emsign.com contain the cRLDistributionPoints extension, which the TLS Baseline Requirements do not permit. eMudhra said it confirmed the issue and was investigating. The company stated it would post a Full Incident Report with the details, root cause, and remediation. The thread identifies the source of the disclosure as a third-party report.

Model: gpt-5.4-mini Generated: 2026-10-20 17:39 UTC Revised: 2026-10-20 17:41 UTC Confidence: 0.96 1 comment

Chronology

2026-10-09 Community member reported that delegated OCSP responder certificates for ocsp.emsign.com and ocsp-a.emsign.com contained a prohibited cRLDistributionPoints extension.
2026-10-12 eMudhra opened the bug and said it had confirmed the issue and was investigating.

Thread Activity

2026-10-12 Emudhra representative — Reported that eMudhra received a CPR from a community member, confirmed the issue, and would provide a Full Incident Report.

Participants

Emudhra representative

External References

Original Bugzilla Case

Similar Local Cases

#1914466 RESOLVED Certificate Misissuance Opened 2024-08-22 · Closed 2024-10-02 · 76% similar

eMudhra emSign PKI Services: CA Certificates not published in DER Encoded Format

AI Summary CA Owner

#2080708 ASSIGNED Ca Certificate Compliance Incident Externally Reported Incident Vulnerability Disclosure Opened 2026-10-12 Still Open · 75% similar

Telekom Security: OCSP responder uses incorrect signature algorithm for P-384 signing key

AI Summary CA Owner

#2056882 RESOLVED Externally Reported Incident Certificate Misissuance Opened By Ca Single Ca Owner Opened 2026-07-22 · Closed 2026-08-17 · 75% similar

D-Trust: EV Subordinate CA missing required cabfOrganizationIdentifier extension

AI Summary CA Owner

#2082782 UNCONFIRMED Ca Certificate Compliance Incident Certificate Misissuance Policy Document Issue Opened 2026-10-16 Still Open · 74% similar

eMudhra emSign PKI Services: TLS certificates missing certificate-type policy OID required by CP/CPS

AI Summary CA Owner

#2080229 ASSIGNED Ca Certificate Compliance Externally Reported Incident Incident Vulnerability Disclosure Opened 2026-10-09 Still Open · 73% similar

NAVER Cloud Trust Services: OCSP responses with an empty responseExtensions

AI Summary CA Owner

#2075255 ASSIGNED Ca Certificate Compliance Externally Reported Incident Problem Reporting Failure Opened 2026-09-24 Still Open · 73% similar

NETLOCK: Certificate Problem Report [CRL BR S7.2.2]

AI Summary CA Owner

#2080806 ASSIGNED Ca Certificate Compliance Externally Reported Incident Incident Vulnerability Disclosure Opened 2026-10-12 Still Open · 73% similar

Actalis: Non-compliant OCSP responses and OCSP responder certificate

AI Summary CA Owner

#2082799 NEW Ca Certificate Compliance Policy Document Issue Incident Externally Reported Incident Opened 2026-10-16 Still Open · 73% similar

Telekom Security: Typographical error in CPS section 7.1.6

AI Summary CA Owner