Bug 1961406 Opened 19 hours ago Updated 3 hours ago https://bugzilla.mozilla.org/show_bug.cgi?id=1961406 Cert revoked: https://crt.sh/?id=17926238129&opt=ocsp Thanks to Erik at security.nl : https://www.security.nl/posting/884827/Domain Validation en OCSP
Preliminary Incident Report is published. See above mentioned Bugzilla thread for the Summary: https://bugzilla.mozilla.org/show_bug.cgi?id=1961406 See postings by Rebecca. Read there more for the details!!! Further down in that thread the other 10 certificates (that were mis-issued and have now been revoked) were given. === One more quote:
Article in Dutch at security.nl : SSL.com verstrekte door bug tls-certificaat clouddienst Alibaba aan onderzoeker https://www.security.nl/posting/885...rtificaat clouddienst Alibaba aan onderzoeker
Another link to an English article about the issue: https://www.theregister.com/2025/04/22/ssl_com_validation_flaw/
