← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1649943
Ca Certificate Compliance
Firmaprofesional: Incorrect OCSP Delegated Responder Certificate
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves Firmaprofesional's issuance of OCSP Delegated Responder certificates without the required `id-pkix-ocsp-nocheck` response, violating the CA/Browser Forum Baseline Requirements. The issue was initially reported by Ryan Sleevi on July 2, 2020. Firmaprofesional acknowledged the problem and provided an incident report detailing their awareness of the issue and the timeline of their response. They confirmed that the affected certificates would be reissued without the offending EKU and outlined steps for revocation and key destruction. The bug was resolved with the implementation of these corrective actions.
Chronology
- Initial report of OCSP Delegated Responder certificate issue.
- Firmaprofesional committed to reissuing affected certificates.
- Firmaprofesional outlined a plan for key destruction and certificate rollover.
- Bug resolved after corrective actions were implemented.
Thread Activity
- Community commenter — Reported the issuance of OCSP Delegated Responder certificates without required response.
- Isigma representative — Acknowledged the report and stated they would investigate.
- Isigma representative — Provided an incident report detailing their awareness and actions taken.
- Mozilla representative — Closed the bug, referring to another for further proceedings.
Participants
Community commenter
Isigma representative
Mozilla representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Firmaprofesional: incorrect reserved CA/B Forum OIDs in certificates
Firmaprofesional: Non-BR-Compliant OCSP Responders
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
Firmaprofesional: 2022 - StateorProvince field
Firmaprofesional: Undisclosed Intermediate certificate SIGNE
Firmaprofesional: 2022 - SSL certificates issued with wrong Organization ID number