← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1586115
Certificate Problem Report
Firmaprofesional / SIGNE: No BR Audit for intermediate CA technically capable of issuing TLS certs
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case involves Firmaprofesional's subordinate CA, SIGNE, which lacks a Baseline Requirements (BR) audit despite being technically capable of issuing TLS certificates. This situation violates Mozilla's Root Store Policy. The CA acknowledged the issue and initiated an investigation upon being notified. They confirmed that no SSL or TLS certificates had been issued by the SIGNE CA, and a revocation of the CA was scheduled and successfully executed on October 22, 2019.
Chronology
- Bug opened in Bugzilla regarding the lack of BR audit.
- Investigation concluded; confirmed no certificates issued.
- Revocation of the certificate scheduled for October 22.
- Certificate revoked as planned.
- Confirmation of revocation and addition to OneCRL.
Participants
Kathleen Wilson
ealvarez@firmaprofesional.com
chemalogo@isigma.es
External References
Similar Local Cases
Firmaprofesional: Undisclosed Intermediate certificate SDS
Add CFEA and OTC Firmaprofesional's Subordinate CAs to OneCRL
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
Add Firmaprofesional subCA Santander Digital Signature to OneCRL
Add several ICAs of Firmaprofesional to OneCRL
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy
Firmaprofesional: incorrect reserved CA/B Forum OIDs in certificates
Add SHA256 Santander Digital Signature Firmaprofesional SubCAs to OneCRL