CFCA: Wrong SerialNumber encoding

The China Financial Certification Authority (CFCA) identified a compliance issue related to the encoding of the SerialNumber in a certificate, which was reported by a user on March 5, 2019. CFCA acknowledged that the problem stemmed from a system bug involving UTF-8 characters. The affected certificate was revoked on June 29, 2019, and CFCA has since implemented an automated audit and issuance system to enhance compliance and prevent future issues. They have also committed to regular training on RFC 5280 and the Baseline Requirements to ensure adherence to standards. The case has been resolved with CFCA taking proactive steps to address the incident.

1. 2018-06-05 CFCA noticed potential issues with SerialNumber encoding.
2. 2019-06-29 The problematic certificate was revoked.
3. 2019-08-01 CFCA completed updates to their CA system.
4. 2019-12-01 CFCA launched an automated audit and issuance system.

1. 2019-03-05 Lebihan representative — Reported an issue with CFCA's certificate SerialNumber encoding.
2. 2019-07-08 Community commenter — CFCA provided an incident report detailing the issue and corrective actions.
3. 2020-01-23 Community commenter — CFCA confirmed the issue was resolved and provided a final report.