← AC Camerfirma, S.A. cases
Bugzilla #1680083
Certificate Misissuance
Camerfirma: certificate with an incorrect OrganizationName
RESOLVED
FIXED
AC Camerfirma, S.A.
AI Summary
Camerfirma identified a certificate with an incorrect OrganizationName, which was detected by their quality control on November 27, 2020. The certificate was revoked on November 30, 2020, after confirming it was the only occurrence of the issue. The CA has not stopped issuing certificates as the error was deemed isolated and not indicative of a systemic failure. Remediation steps included updating the backoffice interface to prevent similar errors in the future.
Chronology
- Error detected in certificate OrganizationName
- Certificate revoked
- UI enhancements deployed to prevent similar issues
Participants
Eusebio Herrera
bwilson@mozilla.com
External References
Similar Local Cases
Camerfirma: Intesa Sanpaolo misissued certificates
Camerfirma: failure to revoke underscores
Camerfirma: Infocert misissued certificates
Camerfirma: MULTICERT Misissuance and missing audits
Camerfirma: Non-BR-Compliant Issuance - Non-printable characters in OU field
HARICA: S/MIME certificate issuance with incorrect commonName
GoDaddy: Misissuance of Cross Signed Certs
IdenTrust: Mis-Issued EV Code Signing Certificate