← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2016066
Certificate Problem Report
Firmaprofesional: Delayed preliminary response under BR 4.9.5 (Bug #2009941)
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
Firmaprofesional experienced a compliance issue by failing to provide a preliminary report of findings within the required 24-hour timeframe after receiving a Certificate Problem Report on January 11, 2026. An automated acknowledgment was sent, but no explicit preliminary findings were communicated until after the deadline. This incident was identified during follow-up discussions with the reporter. The CA has since implemented several corrective actions, including mandatory response controls and automated reminders to ensure compliance with communication obligations in the future.
Chronology
- Certificate Problem Report received; automated acknowledgment sent.
- 24-hour deadline elapsed without explicit preliminary findings report.
- Separate tracking bug opened.
- Closure report submitted after completing action items.
Participants
ext-antoni.camon@logalty.com
rdaurne77@gmail.com
malcolm.doody@gmail.com
incident-reporting@ccadb.org
External References
Similar Local Cases
Firmaprofesional: Delayed revocation disclosure of TLS Subordinate CA certificate Secure Web 2024 in CCADB
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
Firmaprofesional: Incorrect publication of information for "Test Website - Revoked" URL in the CCADB.
Microsoft PKI Services: Sample Site Certificates expired
Firmaprofesional: Policy Qualifiers other than id-qt-cps present for certificate
Microsoft PKI Services: Failure to Revoke in 5 Days for 1962829
Entrust: CPR was not responded to in 24 hours