← AC Camerfirma, S.A. cases
Bugzilla #1524871
Revocation Issue
Incident
Camerfirma: failure to revoke underscores
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Camerfirma was reported for failing to revoke certificates containing dnsNames with underscores by the deadline of January 15, 2019. The CA acknowledged the issue after being notified by Jonathan Rudenberg on January 29, 2019, and confirmed the receipt of the report. They subsequently revoked two of the three problematic certificates and completed the revocation of the last one by February 4, 2019. An incident report was prepared detailing the actions taken, including the implementation of controls to prevent future occurrences. The case is now resolved with all necessary actions completed.
Chronology
- Deadline for revocation of certificates containing dnsNames with underscores.
- Camerfirma completed the revocation of the last problematic certificate.
Thread Activity
- Titanous representative — Notified Camerfirma of the failure to revoke certificates containing underscores.
- AC Camerfirma, S.A. — Confirmed that an incident report was being finalized.
- AC Camerfirma, S.A. — Announced that the lint service to prevent future issues was made available.
- Fastly representative — Indicated that all questions had been answered and remediation was complete.
Participants
Titanous representative
Community commenter
AC Camerfirma, S.A.
Fastly representative
External References
Similar Local Cases
Camerfirma: MULTICERT certificates with a validity period greater than 825 days
Camerfirma: Unrevocation of MULTICERT SSL Certification Authority 001 certificate
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
Camerfirma: Intesa Sanpaolo misissued certificates
Camerfirma: Certificates without CABForum OV Reserved Policy Identifier
Camerfirma: Non-BR-Compliant OCSP Responders
Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy