[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 4 sources · 3 days · First seen · Last updated

AusweisApp TLS certificate revocation

Overview

On September 25, 2026, the certification authority D-Trust GmbH, operated by the Bundesdruckerei, revoked the TLS certificate for the domain ausweisapp.bund.de. The revocation was recorded on the Certificate Revocation List with the reason code ‘Privilege Withdrawn’. While this technical category can indicate various issues such as governance problems or errors in original issuance, it does not necessarily imply a private key compromise.

Following the revocation, the AusweisApp website experienced temporary access issues on September 26, as web browsers like Firefox and Chrome issued security warnings or blocked access. Although the revocation caused connectivity issues, the underlying online identification functionality was not reported to be generally down. The website regained accessibility on Saturday evening after a new certificate was issued.

Entities

AusweisApp · Bundesdruckerei · Bundesdruckerei-Gruppe · D-Trust GmbH · D-Trust

Timeline

  1. [TECHNOLOGY] 2 sources
    AusweisApp website blocked following TLS certificate revocation

    The German AusweisApp website faced temporary browser blocks after D-Trust revoked its TLS certificate due to a ‘privilegeWithdrawn’ status, though no key compromise was indicated.

  2. [TECHNOLOGY] 2 sources
    Bundesdruckerei revokes TLS certificate for AusweisApp

    D-Trust GmbH has revoked the TLS certificate for ausweisapp.bund.de citing ‘Privilege Withdrawn’, though the specific reason remains unclear and no service disruption has been reported.

Sources

ad-hoc-news.de · andysblog.de · blackout-news.de · blogspan.net