← AC Camerfirma, S.A. cases
Bugzilla #1688215
Ca Documents
Incident
Policy Document Issue
Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant
RESOLVED
FIXED
AC Camerfirma, S.A.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Camerfirma identified compliance deficiencies in the Certification Practice Statements (CP/CPS) for the Intesa Sanpaolo Sub-CA. The issues included a lack of specification regarding domain validation methods and CAA domains, which are required by Mozilla Policy and the Baseline Requirements. Upon discovering these issues on January 22, 2021, Camerfirma initiated a review and committed to updating the CPS. The new version was published on February 5, 2021, addressing the identified deficiencies. The CA has also implemented a plan for periodic reviews of all SubCAs' CPSs to prevent future compliance issues.
Chronology
- Camerfirma became aware of compliance deficiencies in the CP/CPS for Intesa Sanpaolo Sub-CA.
- Camerfirma started the process to update the CPS.
- Camerfirma published the updated CPS.
Thread Activity
- Mm representative — Reported deficiencies in the CP/CPS for Intesa Sanpaolo Sub-CA.
- AC Camerfirma, S.A. — Provided a detailed incident report and timeline of actions taken.
- AC Camerfirma, S.A. — Announced the publication of the new version of the CPS.
Participants
Mm representative
AC Camerfirma, S.A.
Community commenter
Mozilla representative
External References
Similar Local Cases
Camerfirma: No disclosure of verification sources
Camerfirma: Certificate issued with 3-year lifespan, unknown policy
Camerfirma: MULTICERT certificates with a validity period greater than 825 days
Camerfirma: Unrevocation of MULTICERT SSL Certification Authority 001 certificate
SECOM: CP/CPS does not clearly specify domain validation methods
Camerfirma: Multicert SSL CA 001: Insufficient serial number entropy
Camerfirma: Certificates without CABForum OV Reserved Policy Identifier
Camerfirma: failure to revoke underscores