Consorci AOC: Problem reporting mechanism URL points to invalid certificate
The case reports that Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) had a problem reporting mechanism listed in the CCADB that pointed to a URL with an invalid certificate. The reporter noted that the CCADB entry for the CA information report mechanism (https://ccadb-public.secure.force.com/mozilla/CAInformationReport) redirected to https://suport.aoc.cat/, which produced a certificate error because the certificate’s SANs covered different domains. Kathleen Wilson updated the CCADB to set the CA’s problem reporting mechanism email, per the CA’s response to the CA Communication, but also noted that the CA website URL itself still caused a certificate error. The CA’s assigned representative (Francesc Ferrer) stated that the suport.aoc.cat URL was no longer the access point to their support portal because web access was being migrated to a new server/URL not yet provided for addition to the Mozilla CA Information Report page. He also referenced action 6 of the November 2017 CA Communication, saying a new dedicated problem reporting email had been created and updated. The CA requested that, from their perspective, the scope of the bug was no longer focused on the CCADB problem reporting and that it could be closed. The bug is marked RESOLVED with resolution FIXED.
- A CCADB problem reporting mechanism for Consorci AOC was found to redirect to a support URL that triggered a certificate error.
- Consorci AOC stated the old support URL was retired due to migration and that a new dedicated problem reporting email had been created.
- Community commenter — Reported that the CCADB problem reporting mechanism redirected to https://suport.aoc.cat/ and that this URL produced a certificate error due to SANs for different domains.
- Community commenter — Said the CCADB was updated with a problem reporting mechanism email, but noted the remaining issue that the CA website URL still produced a certificate error.
- Community commenter — Acknowledged Kathleen’s update.
- Community commenter — Explained that suport.aoc.cat was no longer the support portal URL due to migration, and stated that a new dedicated problem reporting email had been created per the November 2017 CA Communication, asking to close the bug.