Camerfirma: Certificate issued with 3-year lifespan, unknown policy
This case involves Camerfirma's issuance of a certificate with a 3-year lifespan that was found to have an unknown policy identifier. The issue was discovered during a review of another bug, leading to concerns about compliance with Mozilla's Root Store Policy and the CA/Browser Forum Baseline Requirements. Camerfirma acknowledged the error, clarified that the certificate was an Electronic Seal certificate, and initiated a review of their Certification Practices Statement (CPS) to ensure all relevant OIDs were documented. The CPS has since been updated to include the missing OIDs, and the case has been resolved.
- Certificate with unknown policy identifier discovered during review.
- Camerfirma updated their CPS to include missing OIDs.
- Thisisntrocket representative — Reported a certificate with an unknown policy identifier and compliance issues.
- AC Camerfirma, S.A. — Clarified the certificate was an Electronic Seal certificate and an error occurred in CT logging.
- AC Camerfirma, S.A. — Updated that a manual review of all OIDs was being conducted.
- AC Camerfirma, S.A. — Announced the publication of the updated CPS with the missing OIDs.