← China Financial Certification Authority (CFCA) cases
Bugzilla #1532113 Certificate Misissuance Self Reported Incident

CFCA: O > 64 characters

RESOLVED FIXED China Financial Certification Authority (CFCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

The China Financial Certification Authority (CFCA) was notified of certificates issued with an organizationName longer than 64 characters. Following the report from Michel Le Bihan on March 2, 2019, CFCA investigated and found two such certificates. They communicated with affected customers regarding the revocation process, ultimately revoking one certificate on March 18, 2019, and the other on July 9, 2019. CFCA has since fixed the underlying issues in their Registration Authority (RA) system, implemented stricter audits, and ceased issuing certificates with this problem. A comprehensive internal audit was conducted, confirming compliance with requirements.

Model: gpt-4o-mini Generated: 2026-06-13 18:04 UTC Revised: 2026-06-16 18:04 UTC Confidence: 0.90 22 comments
Chronology
  1. CFCA checked the CA database and contacted affected customers after receiving the report.
  2. CFCA revoked the second problematic certificate.
Thread Activity
  1. Lebihan representative — Reported certificates with organizationName longer than 64 characters.
  2. Community commenter — CFCA provided a detailed incident report and outlined corrective actions.
  3. Community commenter — CFCA submitted a final report detailing the incident and remediation steps.
Participants
Lebihan representative Community commenter Fastly representative
Similar Local Cases
#1532559 RESOLVED Certificate Misissuance Self Reported Incident Opened 2019-03-05 · Closed 2023-02-22 · 100% similar
CFCA: Wrong SerialNumber encoding
#1608333 RESOLVED Self Reported Incident Opened 2020-01-10 · Closed 2023-02-22 · 100% similar
CFCA: Wrong OrganizationName
#1565494 RESOLVED Audit Finding Self Reported Incident Repository Issue Opened 2019-07-12 · Closed 2024-06-30 · 94% similar
CFCA: Missed annual CPS update publication on website in 2018
#1599484 RESOLVED Self Reported Incident Certificate Misissuance Opened 2019-11-26 · Closed 2023-02-22 · 87% similar
Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"
#2031281 RESOLVED Ca Certificate Compliance Self Reported Incident Incident Certificate Misissuance Opened 2026-04-13 · Closed 2026-06-16 · 87% similar
CFCA: OCSP Responder Certificate Profile Deviations and OCSP Service Issues
#1467414 RESOLVED Certificate Misissuance Self Reported Incident Opened 2018-06-07 · Closed 2023-02-22 · 86% similar
GDCA: Misissuance of certificates with small RSA keys
#1707073 RESOLVED Certificate Misissuance Self Reported Incident Opened 2021-04-22 · Closed 2023-02-22 · 85% similar
GlobalSign: Invalid countryName
#1575022 RESOLVED Ca Certificate Compliance Certificate Misissuance Self Reported Incident Opened 2019-08-19 · Closed 2023-02-22 · 85% similar
Sectigo: EV SSL Certificates with incorrect subject details.

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action