← Izenpe S.A. cases
Bugzilla #1976256
Certificate Problem Report
IZENPE: IssuingDistributionPoint extension in CRLs not marked as Critical
RESOLVED
FIXED
Izenpe S.A.
AI Summary
Izenpe S.A. was found to be issuing CRLs with the 'IssuingDistributionPoint' extension not marked as critical, violating the CA/Browser Forum's Baseline Requirements effective from March 15, 2024. The issue was identified on July 1, 2025, after a third-party notification. Izenpe promptly marked the extension as critical on July 11, 2025, and has since committed to monitoring compliance with all relevant policies to prevent future occurrences. The incident was resolved with no certificates revoked, as the issuance process remained unaffected.
Chronology
- BR 2.0.1 defines that the 'IssuingDistributionPoint' must be marked as critical.
- Non-compliance identified via third-party notification.
- Izenpe marks the 'IssuingDistributionPoint' extension as critical.
Participants
Toni Sáez
External References
Similar Local Cases
Izenpe: Not allowed Qualifier ID OID on Certificate Policies extension
Izenpe: Duplicate attribute in Subject
Izenpe: Not allowed Qualifier ID OID on Certificate Policies extension of Precertificates
IZENPE: not allowed Key Usage in ocsp responder certificate
Izenpe: Intermediate CA certificates not listed in audit report
Izenpe: Failure to provide a preliminary report within 24 hours.
Izenpe: EV certificate with various issues
Izenpe: intermediate certificates not revoked within BR time period