← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2009941
Certificate Misissuance
Firmaprofesional: Misissuance of TLS Subordinate CA "AC Firmaprofesional - Secure Web 2024"
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
Firmaprofesional identified a misissuance involving the TLS Subordinate CA certificate "AC Firmaprofesional - Secure Web 2024", which included a prohibited `organizationalUnitName` attribute. This misissuance was reported by an external party and confirmed by Firmaprofesional during their investigation. The incident led to the revocation of the misissued certificate and 1138 associated Subscriber certificates. Firmaprofesional has since implemented several remediation actions, including updating certificate profiles to prohibit disallowed attributes and establishing a compliance linting process to prevent future occurrences.
Chronology
- TLS Subordinate CA "Secure Web 2024" issued.
- External Certificate Problem Report received.
- Certificate issuance under the affected Subordinate CA stopped.
- Completion of revocation of 1137 TLS Subscriber certificates.
- Expected completion of revocation of the remaining TLS Subscriber certificate.
- Report closure summary provided.
Participants
ext-antoni.camon@logalty.com
bugzilla@jesperkristensen.dk
dean.f.reed@protonmail.com
chrome-root-program@google.com
mathew.hodson@gmail.com
rdaurne77@gmail.com
bsmith@cabbage.org.uk
incident-reporting@ccadb.org
External References
Similar Local Cases
OATI: Misissuance detected by PKIMetal
TunTrust: SSL OV mis-issuance against CP/CPS (Email attribute)
IdenTrust: Cross-signed root certificate mis-issuance
VISA: Misissuance detected by PKIMetal
Microsoft PKI Services: Misissuance detected by PKIMetal
Government of Korea: Misissuance detected by PKIMetal
Actalis: Issuance of certificate using keys previously reported as compromised
SSL.com: Incorrect Domain Validation for 1 TLS certificate with FQDN having "www." string within domain labels