← AC Camerfirma, S.A. cases
Bugzilla #1652603
Delayed Revocation
Camerfirma: Failure to revoke within 7 days: OCSP EKU issue
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns Camerfirma's failure to revoke a non-compliant intermediate CA within the required timeframe. The issue was initially reported by Mozilla to track the incident response regarding delayed revocation. Camerfirma acknowledged the delay and outlined a comprehensive action plan to transition to a compliant intermediate CA, which included specific timelines for revocation and key destruction. As of October 2, 2020, Camerfirma successfully revoked the non-compliant intermediate CA and destroyed its private key, resolving the issue. The case is now marked as fixed.
Chronology
- Camerfirma revoked the non-compliant intermediate CA and destroyed its private key.
Thread Activity
- Mozilla representative — Opening this to track incident response report for delayed revocation of OMC CA.
- AC Camerfirma, S.A. — We want to inform that the National Supervisor has already finished the accreditation process for the new CA.
- AC Camerfirma, S.A. — Today we have finished the last task of the plan of action: revocation of the intermediate CA non-compliant and destruction of its private key.
Participants
Mozilla representative
AC Camerfirma, S.A.
Community commenter
External References
Similar Local Cases
Camerfirma: Delayed revocations of certificates issued by old CAs with an RSA modulus size of 2047 bits
Camerfirma: Delayed revocations related to certificates without CABForum OV Reserved Policy Identifier
Camerfirma: Delayed revocations related to Invalid stateOrProvinceName field
Camerfirma: BR revocation period exceeded
Camerfirma: Decision not to revoke certificates with authorityKeyIdentifier that violates Mozilla Policy
Camerfirma: Delayed revocations related to Invalid authorityKeyIdentifier - recurrent incident
DigiCert: Failure to revoke within 7 days: OCSP EKU issue
Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU