← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1651637
Delayed Revocation
Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Firmaprofesional's failure to revoke Intermediate Certificate Authorities (ICAs) within the required 7-day timeframe following a compliance issue related to the OCSP Extended Key Usage (EKU). The CA acknowledged its inability to meet the revocation deadline and provided updates on its efforts to issue new certificates and revoke the problematic ones. As of August 2020, Firmaprofesional successfully revoked several certificates with the offending EKU and completed a key destruction ceremony in February 2021. The case is now resolved with all necessary actions taken.
Chronology
- Firmaprofesional acknowledges failure to revoke ICAs within 7 days.
- Revocation of certificates with offending EKU is completed.
- Key destruction ceremony is performed.
Thread Activity
- Autoridad de Certificacion Firmaprofesional — We acknowledge that Firmaprofesional will not be able to revoke ICAs disclosed in the Incident Report within 7 days.
- Isigma representative — As planned, on August 6, the following certificates with offending EKU were revoked.
- Isigma representative — Last Friday, 5th of February Firmaprofesional performed the key destruction ceremony.
Participants
Autoridad de Certificacion Firmaprofesional
Isigma representative
Community commenter
Mozilla representative
Thisisntrocket representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
Sectigo: ZeroSSL: failure to revoke within 24 hours
FIRMAPROFESIONAL: Delayed leaf revocation
DigiCert: Failure to revoke within 7 days: OCSP EKU issue
Firmaprofesional: Delayed revocation disclosure of TLS Subordinate CA certificate Secure Web 2024 in CCADB
Firmaprofesional: Delayed revocation of TLS certificates affected by bug #2009941
GoDaddy: Failure to revoke certificate with compromised key within 24 hours
Camerfirma: Failure to revoke within 7 days: OCSP EKU issue