D-Trust third-party report on CCADB CRL URL disclosure mismatch

ASSIGNED D-TRUST

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

D-Trust opened this case after receiving a third-party Certificate Problem Report about discrepancies in CCADB CRL URL disclosures for two root CA hierarchies. The report said the JSON array of full CRL URLs differed between each self-signed root certificate record and its corresponding cross-certificate record. D-Trust said it investigated and aligned the cross-certificate entries to match the self-signed root entries. The company stated that certificate issuance was not impacted and that no misissuance occurred. It also said the incident scope was still under review and would be considered contained once the affected records were corrected in a publicly available CCADB export.

Model: gpt-5.4-mini Generated: 2026-10-20 17:37 UTC Confidence: 0.95 1 comment

Chronology

2026-10-12 D-Trust received a third-party CPR about mismatched CCADB CRL URL disclosures for two root CA hierarchies.
2026-10-14 D-Trust filed a preliminary incident report and corrected the cross-certificate CCADB URL entries to match the self-signed root records.

Thread Activity

2026-10-14 D-Trust — D-Trust reported the third-party CPR, described the CCADB disclosure mismatch, said it had aligned the affected cross-certificate records, and noted the investigation was ongoing.

Participants

D-Trust

External References

Original Bugzilla Case

Similar Local Cases

#2011430 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Audit Delay Opened 2026-01-20 Still Open · 74% similar

D-Trust: Delayed publication of audit attestation letters in the CCADB

AI Summary CA Owner

#2050274 RESOLVED Incident Ccadb Disclosure Issue Problem Reporting Failure Remediation Tracking Opened 2026-06-24 · Closed 2026-08-04 · 71% similar

FNMT: Delay in incident disclosure reporting for Bug 2049012

AI Summary CA Owner

#2047952 RESOLVED Ca Certificate Compliance Incident Externally Reported Incident Problem Reporting Failure Opened 2026-06-16 · Closed 2026-08-04 · 71% similar

KIR: OCSP responder does not return status for precertificate

AI Summary CA Owner

#2083727 UNCONFIRMED Ca Certificate Compliance Externally Reported Incident Ccadb Disclosure Issue Information Request Opened 2026-10-19 Still Open · 70% similar

D-TRUST Subordinate CA Records: Outdated CPS Effective Dates in CCADB

AI Summary CA Owner

#2073779 ASSIGNED Ca Documents Incident Externally Reported Incident Policy Document Issue Opened 2026-09-19 Still Open · 70% similar

TunTrust: CP/CPS markdown version missing root program attestation

AI Summary CA Owner

#2065157 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Delayed Revocation Opened 2026-08-20 · Closed 2026-09-28 · 70% similar

SwissSign: Delayed revocation in Bug 2057448

AI Summary CA Owner

#2058261 ASSIGNED Ca Documents Incident Self Reported Incident Policy Document Issue Opened 2026-07-27 Still Open · 70% similar

Google Trust Services: CPS Missing root program attestation

AI Summary CA Owner

#2056934 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Problem Reporting Failure Opened 2026-07-22 · Closed 2026-10-05 · 70% similar

Actalis: failure to timely update CP/CPS for AgID SubCAs

AI Summary CA Owner