← Krajowa Izba Rozliczeniowa S.A. (KIR) cases
Bugzilla #1525082
Ca Certificate Compliance
Ernst & Young Poland: KIR OCSP "unknown" status for revoked certificate
RESOLVED
INVALID
Krajowa Izba Rozliczeniowa S.A. (KIR)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves Krajowa Izba Rozliczeniowa S.A. (KIR) and their handling of OCSP responses for revoked certificates. It was noted that KIR's auditor suggested that they could leave the OCSP status as 'unknown' for revoked certificates, which raised concerns regarding compliance with WebTrust for CAs. KIR later clarified that they have changed their processes for TLS certificates to align with WebTrust standards. The bug was ultimately resolved as invalid, indicating that the concerns raised did not warrant further action.
Chronology
- Initial report of OCSP status concerns for revoked certificates.
- Clarification provided by KIR regarding their auditing processes.
- Final resolution of the bug as invalid.
Thread Activity
- Fastly representative — Raised concerns about KIR's OCSP response status for revoked certificates.
- Kir representative — Clarified that T-Systems is their auditor and that they are aligning processes with WebTrust.
- Mozilla representative — Closed the bug based on the clarification provided.
- Community commenter — Reopened the bug for further discussion regarding auditor recommendations.
- Fastly representative — Agreed that the bug should be resolved as invalid.
Participants
Community commenter
External References
Similar Local Cases
KIR S.A.: Certificates issued with multiple BR violations
KIR S.A.: Invalid localityName + CRL Revoked but OCSP Unknown
KIR S.A.: Misissuance - missing OCSP AIA, Validity > 825 days
KIR S.A.: CN domain not in SAN
TrustCor: Insufficient Serial Number Entropy
Entrust: Question marks in certificate O and L fields
Entrust: Incorrect Jurisdiction Country Value in an EV Certificate
DigiCert: BR 3.2.5 Validation of Authority Failure for OV Certs