← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1771724
CCADB Compliance
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case addresses a compliance issue regarding Firmaprofesional's Certificate Policy Statement (CPS), specifically the lack of clarity on the differences between OCSP and CRL methods for revocation status. The issue was identified during an annual audit, leading to a commitment from Firmaprofesional to update their CPS to clarify the timing and reliability of revocation information. The CPS was subsequently updated and published on June 23, 2022, resolving the issue.
Chronology
- Issue identified during annual eIDAS/ETSI audit.
- CPS updated and published, confirming resolution of the issue.
Participants
Maria Jose Prieto
Ben Wilson
External References
Similar Local Cases
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: Failure to Respond to April 2023 Survey
Firmaprofesional: 2019 audit Finding #2 - 6.4 Facility, management, and operational controls
Firmaprofesional: Delayed initial incident reporting for Bug 2016475 (72-hour preliminary and 14-day full report timing)
Sectigo: Late CCADB update after CPS update
TWCA: Intermediate CA Certificate Missing from Audit Reports
Google Trust Services: Delayed publication of CPS removing DNS Operator Exception
Firmaprofesional: Delayed weekly updates and responses on open incident reports