Camerfirma: Infocert misissued certificates

Camerfirma, S.A. disclosed a compliance failure involving misissued certificates by its subCA, Infocert. The issues were identified by Camerfirma's Quality Control Team during routine checks, revealing a wrong DNS name in the Subject Alternative Name (SAN) and an organizational unit name that was too long. The misissued certificates were detected and revoked promptly, with corrective actions taken to prevent future occurrences. Camerfirma has since implemented additional pre-issuance checks and improved oversight of its subCAs to enhance compliance with Mozilla's policies.

1. 2018-02-09 Camerfirma detected a misissued certificate with a wrong DNS name in SAN.
2. 2018-04-10 Camerfirma detected a misissued certificate with an organizational unit name that was too long.
3. 2019-06-04 Camerfirma filed a bug report to disclose the misissuance incidents.
4. 2019-11-22 All addendums to contracts with subCAs were signed.

1. 2019-06-04 AC Camerfirma, S.A. — Camerfirma reported the misissued certificates and outlined the corrective actions taken.
2. 2019-06-05 Community commenter — Requested clarification on the timing of the report and the steps taken to prevent future issues.
3. 2019-07-23 AC Camerfirma, S.A. — Detailed the new requirements for existing and new subCAs to improve oversight and compliance.
4. 2019-11-26 AC Camerfirma, S.A. — Confirmed that all addendums to contracts with subCAs were signed.