← AC Camerfirma, S.A. cases
Bugzilla #1623384
Ca Certificate Compliance
Self Reported Incident
Camerfirma: Invalid authorityKeyIdentifier - recurrent incident
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Camerfirma disclosed a recurrent issue regarding invalid authorityKeyIdentifiers in their certificates. The CA first became aware of the problem through a comment in a related bug. Following the detection, Camerfirma took immediate actions including revoking affected certificates and updating their processes to prevent future occurrences. They implemented a new control to verify the authorityKeyIdentifier before certificate issuance and established a procedure for regular profile reviews. All affected certificates were revoked by March 30, 2020, and the CA has since made significant improvements to their management processes.
Chronology
- Camerfirma detected new errors and revoked two certificates.
- All pending certificates with errors were revoked.
- New control for verifying authorityKeyIdentifier was implemented.
Thread Activity
- AC Camerfirma, S.A. — Camerfirma provided a detailed timeline of actions taken in response to the issue.
- AC Camerfirma, S.A. — Camerfirma confirmed that all pending certificates with errors have been revoked.
- AC Camerfirma, S.A. — Camerfirma shared updates on their remediation efforts and new substitution process.
Participants
AC Camerfirma, S.A.
Fastly representative
Community commenter
Mozilla representative
External References
Similar Local Cases
Camerfirma: certificate for unregistered domain cuatis.net
Camerfirma: Failure to abide by Section 8 of Mozilla Policy: Unauthorized, improperly disclosed Subordinate CA
Camerfirma: MULTICERT organizationName Too Long
Camerfirma: Infocert misissued certificates
Camerfirma: Govern d'Andorra audits
Camerfirma: Invalid authorityKeyIdentifier, violating Mozilla Policy and RFC 5280
Camerfirma: suspicious certificate for com.com
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy