Camerfirma: Old CAs with an RSA modulus size of 2047 bits

Camerfirma identified an issue with old CAs that had an RSA modulus size of 2047 bits, which led to the issuance of 40,510 problematic certificates. The CA became aware of the issue on February 5, 2021, and took immediate action to stop issuing certificates with the flawed modulus. They provided clients with a new link to issue certificates from unaffected CAs and initiated a substitution process. The last problematic certificate was issued on February 12, 2021, due to a client error. The CA has committed to revoking affected certificates in batches, with the first batch scheduled for revocation on March 23, 2021.

1. 2021-02-05 Camerfirma informed about the issue by Michael Lettona.
2. 2021-02-12 Last problematic certificate issued.
3. 2021-03-23 First batch of affected certificates scheduled for revocation.