← Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) cases
Bugzilla #1391095
Certificate Problem Report
Add AC FNMT Usuarios certificate to OneCRL
RESOLVED
FIXED
Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT)
AI Summary
The case involves the addition of the AC FNMT Usuarios intermediate certificate to Mozilla's OneCRL. The Government of Spain's CA, FNMT, requested this addition due to concerns about the certificate's potential use for TLS/SSL purposes. The discussion highlighted that FNMT does not issue TLS/SSL certificates from this CA, and the certificate in question was issued prior to a policy change in January 2017. After thorough discussions, it was confirmed that the certificate has been added to OneCRL, with implications for future audits and the handling of similar certificates.
Chronology
- Initial request to add AC FNMT Usuarios certificate to OneCRL.
- Discussion on the necessity of revocation and implications for TLS/SSL usage.
- Confirmation that the AC FNMT Usuarios certificate has been added to OneCRL.
Participants
Kathleen Wilson
Mark Goodwin
José M. T. Carballo
Víctor Montolío Ferrer
External References
Similar Local Cases
Add FNMT's AC Representación certificate to OneCRL
Add Firmaprofesional subCA Santander Digital Signature to OneCRL
Add revoked certificate Certification Authority of WoSign G2 issued by Certum CA root to OneCRL
Add DigiCert non-TLS Intermediate Certs to OneCRL
Leaked private key for Cisco cert
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
Add Consorci AOC "old" hierarchy to OneCRL
Atos: duplicate serial numbers