← AC Camerfirma, S.A. cases
Bugzilla #1672409
Ca Certificate Compliance
Certificate Misissuance
Self Reported Incident
Camerfirma: suspicious certificate for com.com
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Camerfirma issued a certificate on February 14, 2020, for the domain expired.ovcf2019.ca.intesasanpaolo.com.com, which contained suspicious DNS SANs. The certificate was revoked on February 19, 2020, after being identified as problematic. Camerfirma acknowledged the issue was due to human error during the validation process and stated that the certificate was never used in production. They have since implemented measures to prevent similar occurrences, including automating the issuance process for test certificates. The case has been resolved with the certificate being revoked and corrective actions taken.
Chronology
- Camerfirma issued a certificate for a suspicious domain.
- The certificate was revoked.
Thread Activity
- Mm representative — Reported a suspicious certificate issued by Camerfirma.
- AC Camerfirma, S.A. — Acknowledged the report and promised to provide more information.
- AC Camerfirma, S.A. — Provided a detailed timeline of events and actions taken regarding the certificate.
- AC Camerfirma, S.A. — Updated that automatic verification of domains in CSR is established.
- AC Camerfirma, S.A. — Indicated no further updates for the bug.
Participants
Mm representative
AC Camerfirma, S.A.
External References
Similar Local Cases
Camerfirma: Certificate issued with 3-year lifespan, unknown policy
Camerfirma: Certificates without CABForum OV Reserved Policy Identifier
Camerfirma: certificate for unregistered domain cuatis.net
Camerfirma: Failure to abide by Section 8 of Mozilla Policy: Unauthorized, improperly disclosed Subordinate CA
Camerfirma: Infocert misissued certificates
Camerfirma: Intesa Sanpaolo misissued certificates
Camerfirma: Govern d'Andorra audits
Camerfirma: Invalid authorityKeyIdentifier - recurrent incident