government-diplomatic-threat

AusweisApp TLS Certificate Revoked by D-Trust

Sector Threat Intelligence · 2 sources · Updated 2mo ago · First seen Sep 26, 2026

D-Trust, the Bundesdruckerei-operated certificate authority, revoked the X.509/TLS certificate for ausweisapp.bund.de on September 25. Browsers will no longer trust the revoked certificate, potentially presenting certificate-security warnings to users accessing the German electronic-ID application’s domain; two other TLS certificates for the domain reportedly remain valid.

The certificate revocation list cites “Privilege Withdrawn” as the reason. That status does not alone indicate private-key compromise: it can reflect unauthorized or improper certificate use, changes to certificate-holder information, or a certificate issued in error. The precise cause had not been publicly disclosed, and Bundesdruckerei had not responded to media inquiries.

Who's targeting your sector?See the actors and campaigns active against you right now.

See sector threats

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

1 event · Sep 25, 2026

Sep 25, 20262mo ago
D-Trust revokes AusweisApp TLS certificate
The issuing certificate authority revoked the X.509/TLS certificate for ausweisapp.bund.de (serial number 7D0D9F5C1471C81F53BFFF2626EF925918217A35) at 13:55:06 GMT. The revocation list recorded the reason as “Privilege Withdrawn”; the specific cause was not publicly known.
AusweisApp der Bundesdruckerei: Zertifikat überraschend zurückgezogen | heise online

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Organizations

1 linked

D-Trust

Do you run this?See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.

See Your Sector's Threats

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

HeiseNews · Sep 26, 2026

AusweisApp der Bundesdruckerei: Zertifikat überraschend zurückgezogen | heise onlineOpen source ↗

Wiki MozillaNews · Aug 18, 2023

CA/Revocation Reasons - MozillaWikiOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

AusweisApp TLS Certificate Revoked by D-Trust

How this story unfolded

D-Trust revokes AusweisApp TLS certificate

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

DigiNotar Breach Issued Rogue SSL Certificates and Collapsed Trust in Dutch e-Government

macOS Command-Line Tools Retain Trust in eMudhra CAs With Recoverable Private Keys

TrustAsia Revokes 143 Certificates After LiteSSL ACME Validation Reuse Flaw

AusweisApp TLS Certificate Revoked by D-Trust

How this story unfolded

D-Trust revokes AusweisApp TLS certificate

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

DigiNotar Breach Issued Rogue SSL Certificates and Collapsed Trust in Dutch e-Government

macOS Command-Line Tools Retain Trust in eMudhra CAs With Recoverable Private Keys

TrustAsia Revokes 143 Certificates After LiteSSL ACME Validation Reuse Flaw