TrustAsia Revokes 143 Certificates Due to LiteSSL ACME Vulnerability

TrustAsia Revokes 143 Certificates Due to LiteSSL ACME Vulnerability

First seen 23 Jan 2026, 22:10 UTC CybersecuritynewsGbhackers 41.3

Article Content

Browse articles
ThreatCluster

TrustAsia has revoked 143 SSL/TLS certificates after a critical vulnerability was discovered in its LiteSSL ACME service. This flaw, disclosed on January 21, 2026, allowed unauthorized certificate issuance by permitting the reuse of domain validation data across different ACME accounts, violating CA/Browser Forum standards.