← China Financial Certification Authority (CFCA) cases
Bugzilla #2009134
Self Reported Incident
CFCA: reporting delayed when handling incident bug #2005399
RESOLVED
FIXED
China Financial Certification Authority (CFCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The China Financial Certification Authority (CFCA) reported a delay in disclosing an incident related to Bug #2005399, which was not filed within the required 72-hour timeframe due to a misconception that remediation needed to be completed first. The CA acknowledged this delay and submitted a preliminary incident report, followed by a full report detailing the incident and its handling. CFCA has since updated its internal incident handling guidelines to align with community requirements and completed all action items related to this incident. The case is now resolved.
Chronology
- Non-compliance identified due to delayed incident report submission.
- Full incident report submitted by CFCA.
- CFCA completed action items and requested closure of the incident.
Thread Activity
- Community commenter — CFCA acknowledged the delay in filing the incident report.
- Community commenter — CFCA submitted a preliminary incident report detailing the delay.
- Community commenter — Community member raised questions regarding CFCA's handling of the incident.
- Community commenter — CFCA finalized the incident handling standards and requested closure.
Participants
Community commenter
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
CFCA: DV OCA caIssuers Returns PEM Encoded Certificate (RFC 5280 Section 4.2.2.1 Violation)
CFCA: Failed to follow Report lifecycle rule to respond within 7 days
CFCA: Failed to respond a Certificate Problem Report within 24 hours which violates Section 4.9.5 of the TLS BRs
CFCA: BasicConstraints are not marked as critical certificates are missing and therefore not revoked
CFCA: CRL signatureAlgorithm Missing NULL Parameter (RFC 4055 Section 5)
CFCA: OCSP Responder Certificate Profile Deviations and OCSP Service Issues
CFCA: Wrong SerialNumber encoding
CFCA: Missed annual CPS update publication on website in 2018