← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2016475
Delayed Revocation
Firmaprofesional: Delayed revocation disclosure of TLS Subordinate CA certificate Secure Web 2024 in CCADB
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves Firmaprofesional's delayed disclosure of the revocation of the TLS Subordinate CA certificate 'Secure Web 2024' in the CCADB. The revocation occurred on January 23, 2026, but was not disclosed within the required 7-day timeframe as mandated by CCADB Policy Section 3.2. The incident was identified through a third-party report from the Chrome Root Program on February 4, 2026. Firmaprofesional has since taken corrective actions, including updating their revocation procedures to ensure timely CCADB disclosures in the future. The case has been resolved with all action items completed.
Chronology
- Revocation of the TLS Subordinate CA certificate 'Secure Web 2024' completed.
- CCADB 7-day disclosure deadline elapsed.
- Policy non-compliance identified via third-party report.
- CCADB revocation disclosed.
- Remediation actions completed by Firmaprofesional.
Thread Activity
- Logalty representative — Preliminary incident report submitted detailing the delayed CCADB disclosure.
- Logalty representative — Full incident report submitted with a timeline and root cause analysis.
- Logalty representative — Closure summary provided, confirming completion of remediation actions.
Participants
Logalty representative
Community commenter
External References
Similar Local Cases
Firmaprofesional: Delayed revocation of TLS certificates affected by bug #2009941
Firmaprofesional: Delayed preliminary response under BR 4.9.5 (Bug #2009941)
Firmaprofesional: Delayed weekly updates and responses on open incident reports
FIRMAPROFESIONAL: Delayed leaf revocation
Firmaprofesional: Failure to revoke ICAs within 7 days: OCSP EKU
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
Entrust: Delayed reporting of Jurisdiction issue in some EV TLS & Code Signing certificates
e-commerce monitoring GmbH: Delayed revocation