Bundesdruckerei revokes TLS certificate for AusweisApp

The certification authority D-Trust GmbH, operated by the Bundesdruckerei, has revoked the TLS certificate for the domain ausweisapp.bund.de. The revocation, which occurred on September 25, was recorded on the Certificate Revocation List (CRL) with the reason code ‘Privilege Withdrawn’.

The specific cause for this action remains unclear, as ‘Privilege Withdrawn’ is a broad technical category that does not necessarily imply a private key compromise. It can indicate various issues, such as changes in domain information, errors in the original issuance, or governance problems.

Despite the revocation, there is currently no impact on the practical use of the AusweisApp, as two other valid TLS certificates remain in place for the domain.