Firmaprofesional: Undisclosed Intermediate certificate SDS
The bug was created by c**********o@isigma.es and concerns Firmaprofesional’s “undisclosed intermediate certificate SDS.” The reporter noted that, despite the affected certificate being disclosed, there were no audit reports on the CA and referenced Mozilla disclosure/CCADB information. In response, the CA stated that it had communicated to the Spanish Supervisory Body that it was ending operations and that it was not issuing certificates, and it said it would ask for inclusion in OneCRL while the ceasing procedure continued. The CA also reported that it cut RA operator access so it could not issue certificates anymore. Later in the thread, it was stated that the CA was revoked on June 18 (year not specified in the thread) and that the certificate had been confirmed revoked and added to OneCRL. The bug is marked RESOLVED with resolution FIXED.
- Bugzilla case opened regarding Firmaprofesional’s undisclosed intermediate certificate SDS and related disclosure/audit information.
- Thread confirms the certificate was revoked and added to OneCRL.
- Isigma representative — Created the case, citing CCADB/crt.sh disclosure information and stating there were no audit reports for the CA.
- Isigma representative — Provided additional CCADB-related screenshots and supporting material.
- Isigma representative — Answered CA Program questionnaire items, stating the CA communicated end-of-operations to the Spanish Supervisory Body, was not issuing certificates, and had cut RA operator access; also requested OneCRL inclusion (referencing bug 1464362).
- Softvision representative — Suggested changing the component to NSS:: CA Certificate Mis-Issuance.
- Isigma representative — Stated the CA was revoked on June 18.
- Fastly representative — Confirmed the certificate was revoked and added to OneCRL.