← China Financial Certification Authority (CFCA) cases
Bugzilla #1802845
Certificate Problem Report
CFCA: EV certificate with wrong PostalCode&Street
RESOLVED
FIXED
China Financial Certification Authority (CFCA)
AI Summary
The China Financial Certification Authority (CFCA) identified issues with several historically issued EV certificates that contained incorrect PostalCode and Street information. The errors were discovered during a review using a custom lint tool, leading to the revocation of affected certificates. CFCA has since implemented measures to prevent future occurrences, including the deployment of automated verification tools and updates to their internal processes. The case has been resolved with all problematic certificates either revoked or expired.
Chronology
- CFCA discovered PostalCode and Street interchange errors in certificates.
- CFCA provided a full report detailing the errors and revocation timeline.
- CFCA completed the application of Zlint service for automatic verification.
- Case closed by Mozilla.
Participants
Gao Fei
External References
Similar Local Cases
CFCA: Certificate with wrong crlDistributionPoints
CFCA: certificate basicConstraints extension not marked as critical
CFCA: ICA without EKU
CFCA: Delayed reporting of revocation of an intermediate CA certificate
CFCA: CRL Error
CFCA: Failure to respond to a CPR in a complete and/or timely manner
CFCA: Internal iPAddress in certificate
CFCA: invalid dnsNames