← Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) cases
Bugzilla #1886785
Certificate Problem Report
ACCV: Delayed response to CPR
RESOLVED
FIXED
Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV)
AI Summary
The Government of Spain's Autoritat de Certificació de la Comunitat Valenciana (ACCV) experienced a delayed response to a Certificate Problem Report (CPR), breaching the requirements outlined in point 4.9.3 of the Baseline Requirements. The delay occurred because an external notification regarding incorrectly issued certificates was not prioritized and was instead sent for routine review. ACCV has since established a dedicated email address for future problem reports to ensure timely responses.
Chronology
- External observer sent an email indicating a possible problem with certificate issuance.
- Routine review detected a warning involving incorrectly issued certificates.
- ACCV opened a case in CCADB to modify the email address for problem reporting.
- Reviewer confirmed the new email address for reporting problems.
- Bug is set to be closed unless further items arise.
Participants
Jose Amador
rdaurne77@gmail.com
bwilson@mozilla.com
External References
Similar Local Cases
ACCV: Delayed revocation of TLS certificates affected by bug #1884532
Entrust: CPR was not responded to in 24 hours
ACCV: Certificates issued with Policy qualifiers other than id-qt-cps
TWCA: Revocation delay for TLS certificates with non-critical basicConstraints
Entrust: Jurisdiction issue in some EV TLS & Code Signing certificates
GoDaddy : CAA checks passed when records contained incorrect variants of godaddy.com or starfieldtech.com
Microsoft PKI Services: Failure to Revoke in 5 Days for 1962829
SECOM: Difference in upper and lower case between CN field and SAN