← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1771715
Ca Certificate Compliance
Self Reported Incident
Firmaprofesional: 2022 - StateorProvince field
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Firmaprofesional identified an issue with the 'stateOrProvince' field in some of its certificates, where the values did not correspond to actual provinces. The CA became aware of the problem through an eIDAS report from auditors on May 30, 2022. In response, Firmaprofesional decided to revoke all affected TLS certificates within five days and suppress the 'stateOrProvince' field in future TLS certificate issuances. By June 3, 2022, all affected TLS certificates had been revoked. The CA is implementing technical controls to minimize human errors in certificate issuance.
Chronology
- Firmaprofesional received an eIDAS report identifying issues with the stateOrProvince field.
- All affected TLS certificates have been revoked.
Thread Activity
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional received the eIDAS report from the auditors.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional has analyzed that the StateorProvince is not necessary in TLS Certificates and decided to suppress it in future issues.
- Autoridad de Certificacion Firmaprofesional — All affected TLS certificates have been revoked.
- Autoridad de Certificacion Firmaprofesional — The first 3 steps to solve this bug have been done.
- Mozilla representative — I intend to close this on next Wed. 22-June-2022.
Participants
Autoridad de Certificacion Firmaprofesional
Mozilla representative
HARICA
External References
Similar Local Cases
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: 2022 - SSL certificates issued with wrong Organization ID number
Firmaprofesional: 2022 - Title field
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy
Firmaprofesional: Policy Qualifiers other than id-qt-cps present for certificate
Firmaprofesional: Incorrect OCSP Delegated Responder Certificate
Firmaprofesional: 2021 Audit Report Finding 2 out of 3
Firmaprofesional: incorrect reserved CA/B Forum OIDs in certificates