CFCA: Internal iPAddress in certificate

The China Financial Certification Authority (CFCA) issued a certificate containing a reserved IP address, which is a violation of the Baseline Requirements. The issue was reported to CFCA on January 28, 2019, and they promptly initiated a review. CFCA contacted the customer, Standard Chartered Bank, and agreed to revoke the certificate after the Spring Festival holidays to avoid service disruptions. The certificate was revoked on February 20, 2019, after successful testing of a replacement. CFCA has since implemented measures to prevent future occurrences, including system updates and enhanced training for staff.

1. 2019-01-28 CFCA received a report regarding a certificate with a reserved IP address.
2. 2019-02-20 CFCA revoked the problematic certificate.

1. 2019-01-31 Community commenter — Reported the issuance of a certificate containing a reserved IP address.
2. 2019-01-31 Titanous representative — Informed CFCA about the issue via email.
3. 2019-02-20 Community commenter — Confirmed the revocation of the certificate after customer testing.
4. 2019-04-08 Fastly representative — Noted that all questions have been answered and remediation is complete.