← China Financial Certification Authority (CFCA) cases
Bugzilla #1959733
Certificate Problem Report
CFCA: Failed to respond a Certificate Problem Report within 24 hours which violates Section 4.9.5 of the TLS BRs
RESOLVED
FIXED
China Financial Certification Authority (CFCA)
AI Summary
The China Financial Certification Authority (CFCA) failed to respond to Certificate Problem Reports (CPRs) within the required 24-hour timeframe as stipulated in Section 4.9.5 of the TLS Baseline Requirements. This incident was attributed to email filtering issues beyond CFCA's control, which resulted in missed communications. CFCA has since implemented a web form for CPR submissions and established automation to ensure timely responses. All action items have been completed, and the incident is now resolved.
Chronology
- Non-compliance start date
- Non-compliance identified date
- Non-compliance end date
- Closure report prepared
Participants
songxinlei@gmail.com
pete@cooperjr.name
dzacharo@harica.gr
chrome-root-program@google.com
External References
Similar Local Cases
CFCA: OCSP Responder Certificate Profile Deviations and OCSP Service Issues
CFCA: Failure to respond to a CPR in a complete and/or timely manner
CFCA: reporting delayed when handling incident bug #2005399
CFCA: Delayed reporting of revocation of an intermediate CA certificate
CFCA: Internal iPAddress in certificate
CFCA: Invalid TLD in SAN
CFCA: Wrong SerialNumber encoding
CFCA: Precertificate with postalCode and streetAddress swapped