Camerfirma: BR revocation period exceeded
This case concerns Camerfirma’s delayed revocation of certificates that had errors, referenced as a compliance issue in relation to Bug 1623384. Camerfirma stated that the delay in revocation was caused by COVID-19-related problems for some clients, who requested an extension so they could install new certificates before revoking the previous ones to avoid interruption of critical services. Camerfirma said it proceeded with its revocation process after notifying the need to revoke, and it provided affected domains. Camerfirma reported that it completed its action plan, including substituting problematic certificates and arranging a substitution/installation/revocation timeline with clients, with revocation targeted by March 30. Camerfirma also described adding clauses to subscriber agreements for new clients (and reminding old clients) to accept revocation within 5 calendar days for format/content problems, including unilateral revocation if the subscriber cannot be contacted within deadlines. The thread indicates that all pending certificates with errors were revoked by March 30, and a Mozilla reviewer stated that remediation was complete.
- Camerfirma disclosed a delayed revocation situation and provided an action plan and affected domains.
- Camerfirma reported that all pending certificates with errors had been revoked.
- Camerfirma reported completion of subscriber-agreement clause updates and reminders.
- AC Camerfirma, S.A. — Explained that revocation was delayed due to COVID-19 impacts on clients and outlined an action plan, including revocation by March 30 and subscriber-agreement clauses by April 15.
- Community commenter — Tagged the issue as [covid-19], thanked Camerfirma for details, set next update to 2020-03-30, and requested an update on whether revocation was performed.
- AC Camerfirma, S.A. — Informed Mozilla that all pending certificates with errors had already been revoked.
- Community commenter — Updated the next-update timing based on the remaining subscriber-agreement clause step scheduled for April 15.
- AC Camerfirma, S.A. — Reported that extra information/clauses were incorporated for new clients during user registration and that old clients were reminded by email.
- Community commenter — Indicated completion of the steps outlined and that all questions asked were answered.
- Fastly representative — Confirmed that all questions had been answered and remediation was complete.