Camerfirma: Startcom are issuing by proxy using Camerfirma

This case involves StartCom's use of Camerfirma to issue certificates while under a ban for prior compliance violations. A customer reported that StartCom was facilitating certificate issuance through Camerfirma, which is not under the same sanctions. StartCom confirmed that they are acting as a Registration Authority (RA) for Camerfirma, performing validations and passing requests for certificate issuance. The situation raised concerns regarding compliance with Mozilla policies, particularly about the disclosure of such arrangements. StartCom is in the process of transitioning to a new infrastructure and has plans to revoke incorrectly issued certificates. The case has been resolved with StartCom's commitment to adhere to Mozilla's requirements.

1. 2017-03-25 Customer reported StartCom's proxy issuance of certificates through Camerfirma.
2. 2017-04-20 StartCom clarified their operational changes and the arrangement with Camerfirma.

1. 2017-03-25 Samspin representative — Reported StartCom's use of Camerfirma for certificate issuance.
2. 2017-03-28 Mozilla representative — Acknowledged the report and began investigation.
3. 2017-04-20 WoSign CA Limited — Explained StartCom's new infrastructure and the relationship with Camerfirma.