← HARICA cases
Bugzilla #2017845 Certificate Problem Report

HARICA: Incorrect nCAId in PSD2 QCStatement for QWACs

ASSIGNED HARICA
AI Summary

HARICA identified an issue with the manual issuance process for PSD2 Qualified Website Authentication Certificates (QWACs) where the `nCAId` field in the PSD2 QCStatement extension was incorrectly populated. Instead of the required format, the affected certificates included an erroneous `PSD` prefix. A total of four unexpired and unrevoked PSD2 QWACs were affected. HARICA has since replaced and revoked these certificates, updated their validation procedures, and implemented permanent process improvements to prevent future occurrences.

Model: gpt-4o-mini Generated: 2026-06-13 21:16 UTC Confidence: 1.00
Chronology
  1. First certificate with incorrect value issued
  2. Non-compliance identified
  3. All affected certificates replaced and revoked
  4. Incident report closure requested
Participants
HARICA
External References
Similar Local Cases
#2029643 RESOLVED Certificate Problem Report Opened 2026-04-06 · Closed 2026-05-22 · 58% similar
HARICA: Incorrect Open MPIC Lambda implementation by EJBCA ACME Service
#1942130 RESOLVED Certificate Problem Report Opened 2025-01-16 · Closed 2025-05-01 · 52% similar
HARICA: S/MIME certificate issuance without proper validation
#1535772 RESOLVED Certificate Problem Report Opened 2019-03-15 · Closed 2023-02-22 · 51% similar
HARICA: wrong characters in NC extension of Technically Constrained Intermediate CA Certificates
#1535509 RESOLVED Certificate Problem Report Opened 2019-03-15 · Closed 2023-02-22 · 50% similar
HARICA: Insufficient serial number entropy
#1699796 RESOLVED Certificate Problem Report Opened 2021-03-19 · Closed 2023-02-22 · 50% similar
HARICA: Certificates with invalid policy tree
#1649945 RESOLVED Certificate Problem Report Opened 2020-07-02 · Closed 2023-02-22 · 49% similar
HARICA: Incorrect OCSP Delegated Responder Certificate
#1580393 RESOLVED Certificate Problem Report Opened 2019-09-11 · Closed 2022-11-14 · 48% similar
HARICA: OCSP Responder Returned "Unauthorized" for Some Precertificates
#1878106 RESOLVED Certificate Problem Report Opened 2024-02-01 · Closed 2024-03-08 · 48% similar
HARICA: Anomaly in OCSP services after CA software upgrade

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action