← Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) cases

ACCV: Certificates issued with Policy qualifiers other than id-qt-cps

RESOLVED FIXED Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV)

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

The Autoritat de Certificació de la Comunitat Valenciana (ACCV) reported a compliance issue regarding certificates issued with the Policy Qualifier '1.3.6.1.5.5.7.2.2' (User Notice), which is not allowed per the Baseline Requirements. This issue was identified following a notification from Sectigo on April 3, 2024. ACCV confirmed that all affected certificates had been revoked and that no active certificates contained the non-compliant qualifier. They have since implemented measures to prevent future occurrences, including enhanced deployment checks and the use of additional linting tools. The case has been resolved with no outstanding issues.

Model: gpt-4o-mini Generated: 2026-06-13 21:12 UTC Revised: 2026-06-16 19:13 UTC Confidence: 0.90 23 comments

Chronology

2024-04-03 ACCV notified by Sectigo about a revoked certificate with a non-compliant Policy Qualifier.
2024-04-08 ACCV confirmed all affected certificates were revoked.
2024-08-26 ACCV confirmed no outstanding issues; case can be closed.

Thread Activity

2024-04-04 Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Initial report created after notification from Sectigo regarding the compliance issue.
2024-04-05 Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Confirmed that there are no active certificates affected.
2024-04-10 Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Provided a complete list of affected certificates, all of which were revoked.
2024-08-26 Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Confirmed that there are no outstanding issues and the case can be closed.

Participants

Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) Sectigo Community commenter Mozilla representative

External References

Original Bugzilla Case

Similar Local Cases

#1718771 RESOLVED Self Reported Incident Revocation Issue Opened 2021-06-30 · Closed 2023-02-22 · 86% similar

Sectigo: DCV Reuse after 825 days

AI Summary CA Owner

#1736064 RESOLVED Ca Certificate Compliance Certificate Misissuance Self Reported Incident Opened 2021-10-15 · Closed 2023-02-22 · 85% similar

Sectigo: Subject field with unvalidated information included in certificates

AI Summary CA Owner

#1904041 RESOLVED Ca Documents Self Reported Incident Opened 2024-06-21 · Closed 2025-07-01 · 81% similar

NETLOCK: Intermediate CA Certificate not disclosed to CCADB

AI Summary CA Owner

#1563579 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2019-07-04 · Closed 2023-02-22 · 80% similar

Sectigo: Failure to provide timely incident reports

AI Summary CA Owner

#1667744 RESOLVED Self Reported Incident Opened 2020-09-28 · Closed 2023-02-22 · 79% similar

Dhimyotis / Certigna: Certificates issued with validity periods greater than 398-days

AI Summary CA Owner

#1690807 RESOLVED Incident Self Reported Incident Opened 2021-02-04 · Closed 2023-02-22 · 78% similar

GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31

AI Summary CA Owner

#1715024 RESOLVED Certificate Misissuance Self Reported Incident Opened 2021-06-07 · Closed 2023-02-22 · 78% similar

Sectigo: Misspellings in stateOrProvince or localityName fields

AI Summary CA Owner

#1879602 RESOLVED Security Incident Self Reported Incident Opened 2024-02-09 · Closed 2024-07-19 · 77% similar

Entrust: OCSP response signed with SHA-1

AI Summary CA Owner