← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1398240
Ca Certificate Compliance
Incident
Firmaprofesional: Non-BR-Compliant OCSP Responders
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Autoridad de Certificacion Firmaprofesional's non-compliance with Baseline Requirements (BR) regarding OCSP responders. The CA was alerted to the issue on August 29, 2017, and confirmed that affected CAs had ceased issuing SSL/EV certificates. Following the identification of the problem, Firmaprofesional provided a timeline of actions taken and confirmed the revocation of all valid SSL certificates by September 27, 2017. The CA's OCSP responders were found to be returning 'good' statuses for unissued certificates, which led to further scrutiny. The CA has since implemented corrective measures and the non-compliant certificates were added to OneCRL, marking the resolution of the issue.
Chronology
- CA became aware of OCSP responder issues via email.
- All valid SSL certificates issued by CA1 and AA.PP. were revoked.
- Non-compliant CA certificates were added to OneCRL.
Thread Activity
- Mozilla representative — Reported problems with OCSP responders for this CA.
- Isigma representative — Confirmed awareness of the issue and provided a timeline of actions taken.
- Isigma representative — Attached a list of still valid SSL certificates and confirmed plans for revocation.
- Isigma representative — Confirmed that all valid SSL certificates have been revoked.
- Fastly representative — Confirmed that non-compliant CA certificates have been added to OneCRL.
Participants
Mozilla representative
Isigma representative
Community commenter
Fastly representative
External References
Similar Local Cases
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy
Disig: Non-BR-Compliant Certificate Issuance
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: Undisclosed Intermediate certificate SIGNE
Firmaprofesional: 2021 Audit Report Finding 2 out of 3
Microsec: Non-BR-Compliant Certificate Issuance
DocuSign/Keynectis: Non-BR-Compliant OCSP Responders