← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1717795
CCADB Compliance
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
CLOSED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case involves an audit finding for Firmaprofesional related to compliance with RFC 5280 standards. The audit identified issues with certain certificates, specifically regarding the subject:givenName field exceeding allowed lengths and missing certificate policy identifiers. Firmaprofesional has taken steps to address these findings, including ceasing the issuance of affected certificates and updating their Certification Practices Statement (CPS). The resolution of the issues has been discussed among various stakeholders, with ongoing concerns about compliance with both local legislation and international standards.
Chronology
- Bug opened regarding certificate compliance issues.
- Corrective Action Plan modified after AENOR rejected initial finding rejection.
- Ministry provided clarification on naming conventions.
- Firmaprofesional provided updates on CPS and compliance measures.
- Bug closed after review of compliance actions.
Participants
Maria Jose Prieto
Ryan Sleevi
Matthias
Dimitris Zacharopoulos
Ben Wilson
External References
Similar Local Cases
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
SECOM: Intermediate CA Certificates Missing from Audit Reports
Consorci AOC: Qualified audit statements
Firmaprofesional: Failure to Respond to April 2023 Survey
Firmaprofesional: 2019 audit Finding #2 - 6.4 Facility, management, and operational controls
Firmaprofesional: Delayed initial incident reporting for Bug 2016475 (72-hour preliminary and 14-day full report timing)
TWCA: Intermediate CA Certificate Missing from Audit Reports
Microsec: ALV Failures