HARICA: Incorrect OCSP Delegated Responder Certificate

HARICA issued OCSP Delegated Responder certificates without the required `id-pkix-ocsp-nocheck` response, violating Baseline Requirements. The CA initiated an investigation upon discovering the issue, confirming that the affected certificates were never enabled to sign OCSP responses. HARICA developed a mitigation plan, which included revoking the affected certificates and destroying the associated keys. The incident was resolved with the completion of the key destruction ceremony, witnessed by an external auditor.

1. 2020-07-02 Initial report of the incident
2. 2020-11-02 All remaining affected CAs were revoked and keys destroyed