← AC Camerfirma, S.A. cases
Bugzilla #1685557
Self Reported Incident
Incident
Camerfirma: Certificates without CABForum OV Reserved Policy Identifier
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Camerfirma identified a compliance issue affecting 286 certificates that were issued without the required CABForum Reserved Policy Identifier in the Certificate Policies extension. The problem was discovered on January 7, 2021, when the new version of zlint reported errors. Following the detection, Camerfirma immediately ceased the issuance of the affected certificate profiles and began investigating the issue. By January 13, 2021, all affected certificates had been revoked. The CA has committed to improving their processes to prevent similar issues in the future.
Chronology
- Camerfirma detected an error affecting issued certificates due to missing CABForum Reserved Policy Identifier.
- Camerfirma revoked all affected certificates.
Thread Activity
- AC Camerfirma, S.A. — Camerfirma reported an error affecting certificates issued without the required policy identifier.
- AC Camerfirma, S.A. — Camerfirma provided an incident report detailing the timeline and actions taken.
- AC Camerfirma, S.A. — Camerfirma confirmed that all affected certificates had been revoked.
Participants
AC Camerfirma, S.A.
Community commenter
External References
Similar Local Cases
Camerfirma: Certificate issued with 3-year lifespan, unknown policy
Camerfirma: suspicious certificate for com.com
Camerfirma: Failure to abide by Section 8 of Mozilla Policy: Unauthorized, improperly disclosed Subordinate CA
Camerfirma: Unrevocation of MULTICERT SSL Certification Authority 001 certificate
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
Camerfirma: Govern d'Andorra audits
Camerfirma: No disclosure of verification sources
Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant