← China Financial Certification Authority (CFCA) cases

CFCA: Delayed reporting of intermediate CA certificate

RESOLVED FIXED China Financial Certification Authority (CFCA)

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

The China Financial Certification Authority (CFCA) reported a delay in disclosing the CFCA DV OCA intermediate CA certificate to the Common CA Database (CCADB). The issue was identified when CFCA was notified by Ben Wilson on June 17, 2022, that they had not reported the certificate within the required timeframe. CFCA subsequently reported the certificate on June 19, 2022, and clarified that no certificates had been issued since its creation. The CA acknowledged a misunderstanding of the reporting requirements and has since implemented measures to improve compliance, including a double-check mechanism for CCADB operations. The case was resolved with CFCA's commitment to enhance their processes.

Model: gpt-4o-mini Generated: 2026-06-13 21:26 UTC Revised: 2026-06-16 18:06 UTC Confidence: 0.85 15 comments

Chronology

2022-06-17 CFCA was notified of the failure to report the intermediate CA certificate in a timely manner.
2022-06-19 CFCA reported the intermediate CA certificate to the CCADB.
2023-06-30 The case was closed after CFCA implemented corrective measures.

Thread Activity

2022-08-15 China Financial Certification Authority (CFCA) — CFCA acknowledged the delay in reporting the intermediate CA certificate.
2022-09-22 Mozilla representative — Ben Wilson urged CFCA to prioritize compliance with CA certificate profiles.
2023-06-28 Mozilla representative — Ben Wilson indicated he would close the case unless further issues arose.

Participants

China Financial Certification Authority (CFCA) Google representative Mozilla representative

External References

Original Bugzilla Case

Similar Local Cases

#1778035 RESOLVED Self Incident Disclosure Opened 2022-07-05 · Closed 2023-04-19 · 73% similar

CFCA: The wrong status of OCSP

AI Summary CA Owner

#1886135 RESOLVED Certificate Misissuance Opened 2024-03-19 · Closed 2024-09-26 · 71% similar

CFCA: certificate basicConstraints extension not marked as critical

AI Summary CA Owner

#1771482 RESOLVED Self Incident Disclosure Opened 2022-05-27 · Closed 2023-02-22 · 65% similar

CFCA: Precertificate with postalCode and streetAddress swapped

AI Summary CA Owner

#1532559 RESOLVED Certificate Misissuance Self Reported Incident Opened 2019-03-05 · Closed 2023-02-22 · 56% similar

CFCA: Wrong SerialNumber encoding

AI Summary CA Owner

#1949131 RESOLVED Self Reported Incident Opened 2025-02-19 · Closed 2025-05-08 · 56% similar

CFCA: BasicConstraints are not marked as critical certificates are missing and therefore not revoked

AI Summary CA Owner

#1888881 RESOLVED Problem Reporting Failure Opened 2024-04-01 · Closed 2025-04-03 · 55% similar

CFCA: Failure to respond to a CPR in a complete and/or timely manner

AI Summary CA Owner

#1955799 RESOLVED Self Reported Incident Opened 2025-03-23 · Closed 2025-04-11 · 54% similar

CFCA: Failed to follow Report lifecycle rule to respond within 7 days

AI Summary CA Owner

#2009134 RESOLVED Self Reported Incident Opened 2026-01-08 · Closed 2026-02-18 · 50% similar

CFCA: reporting delayed when handling incident bug #2005399

AI Summary CA Owner