← Asseco Data Systems S.A. cases
Bugzilla #2083693
Ca Certificate Compliance
Incident
Self Reported Incident
Problem Reporting Failure
Remediation Tracking
Certum delayed preliminary response to a Certificate Problem Report due to an email typo
UNCONFIRMED
Asseco Data Systems S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Certum reported that it received a Certificate Problem Report on 2026-10-16 and investigated it within 24 hours. It sent a preliminary response, but the message went to an invalid email address because the ".com" address was mistyped. The response was then resent to the correct address on 2026-10-18, which was after the 24-hour deadline for providing a preliminary report to the reporter. The incident was self-reported and explicitly tied to TLS Baseline Requirements section 4.9.5. The thread does not include any further remediation or closure action beyond the disclosure.
Chronology
- Certum received a Certificate Problem Report and investigated it within 24 hours.
- Certum resent the preliminary response to the correct email address after the 24-hour deadline.
Thread Activity
- Assecods representative — Karolina Ruszczyńska filed a self-reported preliminary incident report explaining that the CPR response was first sent to an invalid email address and then resent late.
Participants
Assecods representative
External References
Similar Local Cases
Asseco DS / Certum: Delayed publication of Full Incident Report for Bug 2055775
SwissSign: Delayed Response to CPR - Bugzilla 2083791
Telekom Security: Failure to respond to a certificate problem report within 24 hours
Telekom Security / DFN: CRL validity period exceeds 10 days by one second
Firmaprofesional: Delayed preliminary CPR response due to incomplete mailbox monitoring coverage
DigiCert: Publishing timeline for CRL
IZENPE: revocation reason code not included in CRL issued by Root
DigiCert: Delayed availability of OCSP responses