← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2011855
Delayed Revocation
Firmaprofesional: Delayed revocation of TLS certificates affected by bug #2009941
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Firmaprofesional identified a delayed revocation affecting a TLS Subscriber certificate and its issuing TLS Subordinate CA due to exceptional circumstances related to essential public healthcare services. The revocation could not be completed within the required timelines defined in the TLS Baseline Requirements. This delay was discovered during remediation activities related to a previously reported certificate misissuance (Bug #2009941). The CA scheduled the revocation for January 23, 2026, and completed it as planned. Following the incident, Firmaprofesional implemented several remediation actions to prevent future occurrences, including mandatory pre-issuance screening and updates to their Certificate Practice Statement.
Chronology
- Non-compliance start date due to delayed revocation.
- Revocation of the affected certificates completed.
- Incident report closure requested after remediation actions completed.
Thread Activity
- Logalty representative — Preliminary incident report submitted detailing the delayed revocation.
- Logalty representative — Confirmed completion of revocation for all affected certificates.
- Logalty representative — Final report submitted, requesting closure of the incident.
Participants
Logalty representative
CCADB representative
Community commenter
Cabbage representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Firmaprofesional: Delayed preliminary response under BR 4.9.5 (Bug #2009941)
Firmaprofesional: Delayed revocation disclosure of TLS Subordinate CA certificate Secure Web 2024 in CCADB
Firmaprofesional: Delayed weekly updates and responses on open incident reports
FIRMAPROFESIONAL: Delayed leaf revocation
Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
NETLOCK: CPR was not responded to in 24 hours
Chunghwa Telecom: Controversial Values within Extension (2.5.29.9, subjectDirectoryAttributes)