← eMudhra Technologies Limited cases
Bugzilla #2082408
Ca Certificate Compliance
Incident
Self Reported Incident
Opened By Ca
eMudhra preliminary incident report: TLS certificates exceeded CP/CPS maximum validity by one second
ASSIGNED
eMudhra Technologies Limited
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
eMudhra opened this bug as a preliminary incident report about TLS server certificates that were issued with a validity period of 90 days and 1 second, exceeding the 90-day maximum in Section 6.3.2 of the emSign SSL/TLS CP/CPS. The report says the relevant policy references include the emSign SSL/TLS CP/CPS, TLS Baseline Requirements Section 1.6.1, and RFC 5280 Section 4.1.2.5. The comment states that the source of the incident disclosure was a third-party report. The thread provided here does not include a full incident report or any remediation details beyond the note that more details would be provided later. The bug is currently assigned to Naveen Kumar ML at eMudhra and remains open in ASSIGNED status.
Chronology
- eMudhra disclosed that some TLS server certificates were issued with 90 days and 1 second validity, exceeding the CP/CPS maximum validity period.
Thread Activity
- Emudhra representative — Opened a preliminary incident report and stated that the incident was reported by a third party.
Participants
Emudhra representative
External References
Similar Local Cases
eMudhra emSign PKI Services: TLS certificates missing certificate-type policy OID required by CP/CPS
eMudhra emSign PKI Services: Missing EKU Extension in Subordinate CA Certificates
eMudhra emSign PKI Services: InCommon RSA IGTF Server CA 4 — certificates issued with key sizes not permitted by CPS
eMudhra emSign PKI Services: Test Website TLS Certificates Issued Against CP/CPS.
eMudhra emSign PKI Services: Invalid Subject Locality/State Values
Private key compromise of eMudhra Intermediate Certificates
SwissSign: CLR max validity period exceeded
eMudhra emSign PKI Services : Delayed Publication of Issuing CA Certificates in CCADB