← HARICA cases
Bugzilla #1649945
Self Reported Incident
HARICA: Incorrect OCSP Delegated Responder Certificate
RESOLVED
FIXED
HARICA
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
HARICA disclosed a compliance issue regarding its OCSP Delegated Responder Certificates, which were issued without the required `id-pkix-ocsp-nocheck` response as mandated by the Baseline Requirements. The issue was first reported on July 2, 2020, leading HARICA to initiate an investigation and prepare a mitigation plan. Throughout the investigation, HARICA confirmed that the affected certificates were never enabled to sign OCSP responses. Following a thorough review, HARICA revoked all affected certificates and destroyed the associated keys in November 2020, with the process being witnessed by an external auditor. The case is now resolved.
Chronology
- Initial report of the incident regarding OCSP Delegated Responder Certificates.
- All remaining affected CAs were revoked and keys destroyed.
Thread Activity
- Community commenter — Reported the compliance issue regarding HARICA's OCSP Delegated Responder Certificates.
- HARICA — Confirmed initiation of an investigation into the issue.
- HARICA — Announced the revocation of all remaining affected CAs and destruction of keys.
Participants
Community commenter
HARICA
External References
Similar Local Cases
HARICA: Certificates with invalid policy tree
HARICA: P-384,ecdsa-with-SHA256 Certificates
HARICA: OCSP Responder Returned "Unauthorized" for Some Precertificates
HARICA: Incorrect Open MPIC Lambda implementation by EJBCA ACME Service
HARICA: Incorrect nCAId in PSD2 QCStatement for QWACs
QuoVadis: Incorrect OCSP Delegated Responder Certificate
Atos: Incorrect OCSP Delegated Responder Certificate
PKIoverheid: Incorrect OCSP Delegated Responder Certificate