← Amazon Trust Services cases
Bugzilla #1743943
Delayed Revocation
Amazon Trust Services: Delayed Revocation of Subordinate CA
RESOLVED
FIXED
Amazon Trust Services
AI Summary
Amazon Trust Services faced challenges in revoking a subordinate CA certificate due to potential negative impacts on over 24 million active certificates. The CA received a report indicating a violation of their Certificate Policy Statement (CPS) and initially planned to revoke the certificate within a week. However, after assessing the situation, they determined that immediate revocation would disrupt services and opted to delay the action while exploring alternative solutions. The CA has committed to transitioning to a new intermediate certificate and has set a timeline for revocation, which was ultimately executed on May 24, 2023.
Chronology
- Amazon Trust Services received a report regarding a potential CPS violation.
- Target date for revocation was set for December 1, 2021.
- Amazon Trust Services provided a timeline for action items related to the incident.
- Amazon Trust Services revoked the subordinate CA certificate.
Participants
Trevoli (Amazon Trust Services)
Ryan Sleevi (Google)
Ryan Dickson (Google Chrome)
External References
Similar Local Cases
DigiCert: Delay of revocation for EV audit inconsistency incident
DigiCert: Delayed revocation of IV certificates
DigiCert: Delayed revocation of 1910322
Digicert: Delayed Revocation for bug 1894560
Identrust TrustID Subordinate CA - Revocation Notification