← AC Camerfirma, S.A. cases
Bugzilla #1672029
Ca Certificate Compliance
Self Reported Incident
Camerfirma: Failure to abide by Section 8 of Mozilla Policy: Unauthorized, improperly disclosed Subordinate CA
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Camerfirma disclosed a compliance failure regarding the issuance of an unconstrained subordinate CA without prior public discussion and approval, violating Section 8 of the Mozilla Policy. This issue was raised in the context of previous incidents and concerns about the oversight of subordinate CAs. Following the discussions, Camerfirma committed to providing an incident report and subsequently decided to revoke the problematic subordinate CA, MULTICERT SSL Certification Authority 005, which was executed on February 9, 2021. The case has been resolved with the revocation.
Chronology
- MULTICERT SSL Certification Authority 005 was revoked.
Thread Activity
- Community commenter — Raised concerns about Camerfirma's compliance with Mozilla Policy regarding subordinate CAs.
- AC Camerfirma, S.A. — Confirmed that MULTICERT controls the private key for the CA and stated that no new CAs were introduced.
- AC Camerfirma, S.A. — Announced the decision to revoke MULTICERT SSL Certification Authority 005 by February 12th.
- AC Camerfirma, S.A. — Confirmed that MULTICERT SSL Certification Authority 005 was revoked on February 9th.
Participants
Community commenter
AC Camerfirma, S.A.
Mozilla representative
External References
Similar Local Cases
Camerfirma: Certificate issued with 3-year lifespan, unknown policy
Camerfirma: Certificates without CABForum OV Reserved Policy Identifier
Camerfirma: certificate for unregistered domain cuatis.net
Camerfirma: suspicious certificate for com.com
Camerfirma: Infocert misissued certificates
Camerfirma: Intesa Sanpaolo misissued certificates
Camerfirma: Govern d'Andorra audits
Camerfirma: Invalid authorityKeyIdentifier, violating Mozilla Policy and RFC 5280