Open Bug 2080742 Opened 9 days ago Updated 8 days ago

eMudhra emSign PKI Services: Delegated OCSP Responder certificates containing cRLDistributionPoints extension

Categories

(CA Program :: CA Certificate Compliance, task)

Product:
CA Program
Component:
CA Certificate Compliance
Type:
task

Tracking

(Not tracked)

Status:
ASSIGNED

People

(Reporter: naveen.ml, Assigned: naveen.ml)

Details

(Whiteboard: [ca-compliance] [ocsp-failure])

Summary

  • Incident description: On 2026-10-09, eMudhra received a Certificate Problem Report from a community member stating that the delegated OCSP Responder certificates used by ocsp.emsign.com and ocsp-a.emsign.com contain the crlDistributionPoints extension, which the TLS Baseline Requirements do not permit. We have confirmed the issue and are investigating. We will post a Full Incident Report with the details, root cause and remediation.
  • Relevant policies: TLS Baseline Sections 7.1.2.8.2 and 7.1.2.11.2.
  • Source of incident disclosure: Third Party Reported
Assignee: nobody → naveen.ml
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Whiteboard: [ca-compliance] [ocsp-failure]
You need to log in before you can comment on or make changes to this bug.