CFCA: O > 64 characters
The China Financial Certification Authority (CFCA) was notified of certificates issued with an organizationName longer than 64 characters. Following the report from Michel Le Bihan on March 2, 2019, CFCA investigated and found two such certificates. They communicated with affected customers regarding the revocation process, ultimately revoking one certificate on March 18, 2019, and the other on July 9, 2019. CFCA has since fixed the underlying issues in their Registration Authority (RA) system, implemented stricter audits, and ceased issuing certificates with this problem. A comprehensive internal audit was conducted, confirming compliance with requirements.
- CFCA checked the CA database and contacted affected customers after receiving the report.
- CFCA revoked the second problematic certificate.
- Lebihan representative — Reported certificates with organizationName longer than 64 characters.
- Community commenter — CFCA provided a detailed incident report and outlined corrective actions.
- Community commenter — CFCA submitted a final report detailing the incident and remediation steps.