← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1651637
Certificate Problem Report
Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case involves Firmaprofesional's failure to revoke Intermediate Certificate Authorities (ICAs) within the required timeframe of 7 days, as mandated by the Baseline Requirements. The organization acknowledged this failure and outlined a plan to issue new certificates with new key pairs and to revoke the problematic certificates. Despite challenges related to the Spanish Trusted Services List (TSL) affecting their ability to issue new certificates, Firmaprofesional has made progress in revoking certificates and has completed a key destruction ceremony. The case has been resolved with the implementation of corrective measures.
Chronology
- Initial acknowledgment of failure to revoke ICAs.
- Revocation of certificates with offending EKU.
- Key destruction ceremony performed.
- Confirmation of completion of required steps.
Participants
Maria Jose Prieto
Ryan Sleevi
Chema Logo
External References
Similar Local Cases
Firmaprofesional: Incorrect OCSP Delegated Responder Certificate
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
Firmaprofesional: 2022 - StateorProvince field
Firmaprofesional: 2022 - SSL certificates issued with wrong Organization ID number
GlobalSign: Failure to revoke noncompliant ICA within 7 days
Let's Encrypt: Failure to revoke key-compromised certificates within 24 hours
Firmaprofesional / SIGNE: No BR Audit for intermediate CA technically capable of issuing TLS certs
Izenpe: Failure to revoke within 5 days